From 9c68622becc63e3712879adf7d86d71a2a205071 Mon Sep 17 00:00:00 2001
From: YuviPanda <yuvipanda@gmail.com>
Date: Tue, 13 Aug 2024 12:12:52 -0700
Subject: [PATCH] nasa-veda: Inject MAAP token into user environment

Ref https://github.com/2i2c-org/meta/issues/1368
Ref https://github.com/NASA-IMPACT/veda-analytics/issues/115
---
 config/clusters/nasa-veda/cluster.yaml        |  2 ++
 .../nasa-veda/enc-common.secret.values.yaml   | 19 +++++++++++++++++++
 2 files changed, 21 insertions(+)
 create mode 100644 config/clusters/nasa-veda/enc-common.secret.values.yaml

diff --git a/config/clusters/nasa-veda/cluster.yaml b/config/clusters/nasa-veda/cluster.yaml
index 47a355a05b..f5897b1296 100644
--- a/config/clusters/nasa-veda/cluster.yaml
+++ b/config/clusters/nasa-veda/cluster.yaml
@@ -19,6 +19,7 @@ hubs:
     helm_chart: daskhub
     helm_chart_values_files:
       - common.values.yaml
+      - enc-common.secret.values.yaml
       - staging.values.yaml
       - enc-staging.secret.values.yaml
   - name: prod
@@ -27,6 +28,7 @@ hubs:
     helm_chart: daskhub
     helm_chart_values_files:
       - common.values.yaml
+      - enc-common.secret.values.yaml
       - prod.values.yaml
       - enc-prod.secret.values.yaml
   - name: binder
diff --git a/config/clusters/nasa-veda/enc-common.secret.values.yaml b/config/clusters/nasa-veda/enc-common.secret.values.yaml
new file mode 100644
index 0000000000..cb0458f80d
--- /dev/null
+++ b/config/clusters/nasa-veda/enc-common.secret.values.yaml
@@ -0,0 +1,19 @@
+basehub:
+    jupyterhub:
+        singleuser:
+            extraEnv:
+                MAAP_PGT: ENC[AES256_GCM,data:GqlTCqS7vc8SeKhSnTfwWlxr8HxTnFXvyxR28BfbMuRDcPqFrg9H1S6AyeC95Nfpj0umDRETqUVmafiRN/Ajn71hpL0231DEBi5ACN+cjkVFTWpFca/fIj4=,iv:N1TUwc0ra15difNDyAUMWS08mJOZYA/aR95AAcdzyS0=,tag:DIXqQ5Vb9XuZIW4+KoOVEw==,type:str]
+sops:
+    kms: []
+    gcp_kms:
+        - resource_id: projects/two-eye-two-see/locations/global/keyRings/sops-keys/cryptoKeys/similar-hubs
+          created_at: "2024-08-13T19:09:07Z"
+          enc: CiUA4OM7eAEFDIER5xB2ydhs7iibb29FfEBnX9KLjQSBeXYhOTbDEkkA5dG1QxpFIQm5rgj/ReTtXbDkVuGBBJFczfYlwqObd0CQ9YdeQnDCiLquDZ/k5QgXuiIg97eY7h2db7XfjsUJtYLOSQKJbpKr
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-08-13T19:11:19Z"
+    mac: ENC[AES256_GCM,data:AWiFSTjUQGT/WMgr7ZNQjlsfdIqY6hKBK5NXv0xjalvQjjptlUeKrIxaz30JuYUG9gv9R7OxxMzdRWJ7caj3PBKudCm+haRJgenjNPTJtZk0QJ/0mCYDSd8DH6D+eYgfDk4l26Q23CvkznTpfSl/BSMNcdzo1Ee0KToBEUWfh2Y=,iv:2GbjmTLWCXksikDDHsua/pykRwCTt18RvAfzb0x/nf0=,tag:/ofcQdkwUgMXa+NOtpyBeQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1