CloudBank: Converted SJCC to CiLogon

- modified cluster.yaml
- created enc-sjcc.secret.values
- updated sjcc values file

config/clusters/cloudbank/cluster.yaml

@@ -230,12 +230,13 @@ hubs:
     auth0:
       # connection update? Also ensure the basehub Helm chart is provided a
       # matching value for jupyterhub.custom.2i2c.add_staff_user_ids_of_type!
-      connection: google-oauth2
+      enabled: false
     helm_chart_values_files:
       # The order in which you list files here is the order the will be passed
       # to the helm upgrade command in, and that has meaning. Please check
       # that you intend for these files to be applied in this order.
       - sjcc.values.yaml
+      - enc-sjcc.secret.values.yaml
   - name: tuskegee
     display_name: "Tuskegee University"
     domain: tuskegee.cloudbank.2i2c.cloud

config/clusters/cloudbank/enc-sjcc.secret.values.yaml

@@ -0,0 +1,20 @@
+jupyterhub:
+    hub:
+        config:
+            CILogonOAuthenticator:
+                client_id: ENC[AES256_GCM,data:LYsHnOvHo+YohdTVVSo1/SwjuMQalAAehC2bvuNoJuQ5DRIIJOlasE85XyhXNBeMvUaA,iv:TjbIYeftupwXepflUgSOekXXTui88ywPWJDwXttiLwo=,tag:ZKgZJD+ZqOEeaPw7ciS/9w==,type:str]
+                client_secret: ENC[AES256_GCM,data:PVNbwuDF7Kx+n4a8gBfi3k1ne4gJ2ATzKB1qwMbBpJ89fJaADDV7KBetTtnqap5zGKxD9WJ2Kg8qrCwVDMM0RZQHOUwoISawoq3M6uxC7AKUHZzYDTA=,iv:ymRoLsOah0jfQExo0Cc6SFYuuuhLjqe4pZvOkDLRCtc=,tag:SRic3qFWgtuwhau2pSO5pg==,type:str]
+sops:
+    kms: []
+    gcp_kms:
+        - resource_id: projects/two-eye-two-see/locations/global/keyRings/sops-keys/cryptoKeys/similar-hubs
+          created_at: "2022-12-22T18:26:51Z"
+          enc: CiUA4OM7eOow6Jope46vV7W6dr8vCsC0UOcZnf0+qE8Wpwtb7EIaEkkA+0T9heSlokmeU2HZNeM0EMPVDUDAcS8P3nCNSFP3SxVFnZz2DKZVoNAp9IA52MTf/0Qi17sf9PwiqOO7x3kp8fTmEMUGZOTa
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-12-22T18:26:52Z"
+    mac: ENC[AES256_GCM,data:/8nS+MnLo8PCPYJ3XDt8ghyPuYwLmQLLtHEH5jEl2ACkRsLV4fLxwzZag6TFailzW1P7ivg1DatCU6F6wkwrTDtZcF08wgk2a2hGN6gjqTrwPMr+EFfEci3buXxj7l/nWmGrP4BUr+i1V9FBoV7BIVrpYqv4Qy36/Qe/ixZoT24=,iv:VMT4FKU79eVrsft3A6hWpZkwddax2FkGTB8mApyRyY4=,tag:V51uv0Z/gr5FQO6p72lOWw==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.1

config/clusters/cloudbank/sjcc.values.yaml

@@ -20,10 +20,16 @@ jupyterhub:
           url: http://cloudbank.org/
   hub:
     config:
+      JupyterHub:
+        authenticator_class: cilogon
+      CILogonOAuthenticator:
+        oauth_callback_url: https://sjcc.cloudbank.2i2c.cloud/hub/oauth_callback
+        username_claim: email
       Authenticator:
-        allowed_users: &sjcc_users
-          - [email protected]
-          - [email protected]
+        admin_users:
           - [email protected]
           - [email protected]
-        admin_users: *sjcc_users
+          - [email protected]
+          - [email protected]
+          - [email protected]
+        username_pattern: '^(.+@2i2c\.org|.+@berkeley\.edu|.+@sjcc\.edu|.+@evc\.edu|deployment-service-check)$'