[pull] master from 2i2c-org:master

config/clusters/cloudbank/cluster.yaml

@@ -276,3 +276,11 @@ hubs:
       - common.values.yaml
       - csulb.values.yaml
       - enc-csulb.secret.values.yaml
+  - name: csum
+    display_name: "Cal Maritime"
+    domain: csum.cloudbank.2i2c.cloud
+    helm_chart: basehub
+    helm_chart_values_files:
+      - common.values.yaml
+      - csum.values.yaml
+      - enc-csum.secret.values.yaml

config/clusters/cloudbank/csum.values.yaml

@@ -0,0 +1,78 @@
+jupyterhub:
+  ingress:
+    hosts: [csum.cloudbank.2i2c.cloud]
+    tls:
+      - hosts: [csum.cloudbank.2i2c.cloud]
+        secretName: https-auto-tls
+  singleuser:
+    memory:
+      # Increased to help deal with possible kernel restarts
+      # https://2i2c.freshdesk.com/a/tickets/567
+      guarantee: 384M
+      limit: 1.5G
+  custom:
+    2i2c:
+      add_staff_user_ids_to_admin_users: true
+      add_staff_user_ids_of_type: "google"
+    homepage:
+      templateVars:
+        org:
+          name: CSU Maritime
+          logo_url: https://www.csum.edu/_resources/images/cal-maritime-logo.svg
+          url: https://www.csum.edu/
+        designed_by:
+          name: 2i2c
+          url: https://2i2c.org
+        operated_by:
+          name: CloudBank
+          url: http://cloudbank.org/
+        funded_by:
+          name: CloudBank
+          url: http://cloudbank.org/
+  hub:
+    config:
+      JupyterHub:
+        authenticator_class: cilogon
+      CILogonOAuthenticator:
+        oauth_callback_url: "https://csum.cloudbank.2i2c.cloud/hub/oauth_callback"
+        allowed_idps:
+          https://cma-shibboleth.csum.edu/idp/shibboleth:
+            username_derivation:
+              username_claim: "email"
+            # allow_all is a partial authorization, username_pattern is enforced also
+            allow_all: true
+          http://google.com/accounts/o8/id:
+            username_derivation:
+              username_claim: "email"
+            # allow_all is a partial authorization, username_pattern is enforced also
+            allow_all: true
+      Authenticator:
+        admin_users:
+          - [email protected]
+          - [email protected]
+          - [email protected]
+    extraFiles:
+      configurator-schema-default:
+        data:
+          properties:
+            Spawner.default_url:
+              type: string
+              title: Default User Interface
+              enum:
+                - "/tree"
+                - "/lab"
+                - "/retro"
+              default: "/retro"
+              enumMetadata:
+                interfaces:
+                  - value: "/tree"
+                    title: Classic Notebook
+                    description:
+                      The original single-document interface for creating
+                      Jupyter Notebooks.
+                  - value: "/lab"
+                    title: JupyterLab
+                    description: A Powerful next generation notebook interface
+                  - value: "/retro"
+                    title: RetroLab
+                    description: A JupyterLab distribution with a retro look and feel, more similar to the classic Jupyter notebook.

config/clusters/cloudbank/enc-csum.secret.values.yaml

@@ -0,0 +1,20 @@
+jupyterhub:
+    hub:
+        config:
+            CILogonOAuthenticator:
+                client_id: ENC[AES256_GCM,data:PI6yjbL3olWLlq26koCg6KABc+ybCCGy+pFE2Il98tf3xPU9HaCoZH1dKt7SD1NKA4R8,iv:kA/EGMlmkT1WqSqOy+2Xd3JZ+Sq1PZ7SWuCX9tZRxGg=,tag:xItpD8XkXb6xpE46N6ulaQ==,type:str]
+                client_secret: ENC[AES256_GCM,data:2wL5CGzri078gTbAM9Hr13gVK9HJ7k4aRjHECB1Pzx1VoWjnCoPdjY4DJoj8dygNuWdnaqnWyVCnkRvbB8uaGOfS0CxidqW6Ss613ImzHTbXp+e7mZ4=,iv:DfnyJUC2+yvSQ+YWUdTyTz91LYgvSpxLgDUSlObGTOE=,tag:dSWrZQvBC7ZLRAIdKH1F/Q==,type:str]
+sops:
+    kms: []
+    gcp_kms:
+        - resource_id: projects/two-eye-two-see/locations/global/keyRings/sops-keys/cryptoKeys/similar-hubs
+          created_at: "2023-10-05T00:31:30Z"
+          enc: CiUA4OM7eNtG1cNIv4QB2VH+JKlAqe1Ov+Ap54lkXgvDCpUCh+kFEkkAq2nhVYtYZdZ1IuUmDQqdgK0ayXaFp6C11QLcZPGd3Gunnimn+wKHgWfXpVu/g2Y1SWk4OUC4XGzKSimRw0fojqk8628chIjL
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2023-10-05T00:31:31Z"
+    mac: ENC[AES256_GCM,data:vniIZBRVrriTVZ17PTdIPoTpJRlxChLBcBA8Sg8okwcvZ/JGsaCF56GYYvdDg+V8jmQodQP93bWP1Cje3AsI6tDKREJmeZriy18zWl1I7R+XHqqE3wID1tVo+e902PeN/Kz0IjbxZuvBkEB/2Fbl+pSiu8zqF/DAOFQaylbdpd4=,iv:JymaZDho32gpLREJwWFdMYSOCKqk15QEUsO1heu/vKo=,tag:0C3L9TAzY+rmBQXdXbAizA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.1