From 661a360da3d988b65cb98d7c6d3845410d4462bb Mon Sep 17 00:00:00 2001
From: sean-morris <sean.smorris@gmail.com>
Date: Mon, 26 Aug 2024 17:30:58 -0700
Subject: [PATCH] [CloudBank] CCC Added

---
 config/clusters/cloudbank/ccc.values.yaml     | 54 +++++++++++++++++++
 config/clusters/cloudbank/cluster.yaml        |  8 +++
 .../cloudbank/enc-ccc.secret.values.yaml      | 20 +++++++
 3 files changed, 82 insertions(+)
 create mode 100644 config/clusters/cloudbank/ccc.values.yaml
 create mode 100644 config/clusters/cloudbank/enc-ccc.secret.values.yaml

diff --git a/config/clusters/cloudbank/ccc.values.yaml b/config/clusters/cloudbank/ccc.values.yaml
new file mode 100644
index 000000000..e1955c3f3
--- /dev/null
+++ b/config/clusters/cloudbank/ccc.values.yaml
@@ -0,0 +1,54 @@
+jupyterhub:
+  ingress:
+    hosts: [ccc.cloudbank.2i2c.cloud]
+    tls:
+      - hosts: [ccc.cloudbank.2i2c.cloud]
+        secretName: https-auto-tls
+  singleuser:
+    memory:
+      # Increased to help deal with possible kernel restarts
+      # https://2i2c.freshdesk.com/a/tickets/567
+      guarantee: 384M
+      limit: 1.5G
+  custom:
+    2i2c:
+      add_staff_user_ids_of_type: google
+      add_staff_user_ids_to_admin_users: true
+    homepage:
+      templateVars:
+        designed_by:
+          name: 2i2c
+          url: https://2i2c.org
+        funded_by:
+          name: CloudBank
+          url: http://cloudbank.org/
+        operated_by:
+          name: CloudBank
+          url: http://cloudbank.org/
+        org:
+          logo_url: https://www.contracosta.edu/wp-content/themes/rootid-base-theme/assets/images/logo.png
+          name: Contra Costa College
+          url: https://www.contracosta.edu/
+  hub:
+    config:
+      JupyterHub:
+        authenticator_class: cilogon
+      CILogonOAuthenticator:
+        oauth_callback_url: https://ccc.cloudbank.2i2c.cloud/hub/oauth_callback
+        allowed_idps:
+          http://login.microsoftonline.com/common/oauth2/v2.0/authorize:
+            default: true
+            username_derivation:
+              username_claim: "email"
+            allowed_domains:
+              - contracosta.edu
+              - email.4cd.edu
+              - insite.4cd.edu
+          http://google.com/accounts/o8/id:
+            username_derivation:
+              username_claim: "email"
+      Authenticator:
+        admin_users:
+          - ericvd@berkeley.edu
+          - sean.smorris@berkeley.edu
+          - cliu321@email.4cd.edu
diff --git a/config/clusters/cloudbank/cluster.yaml b/config/clusters/cloudbank/cluster.yaml
index 9c6717eb8..5a10f6754 100644
--- a/config/clusters/cloudbank/cluster.yaml
+++ b/config/clusters/cloudbank/cluster.yaml
@@ -28,6 +28,14 @@ hubs:
       - common.values.yaml
       - bcc.values.yaml
       - enc-bcc.secret.values.yaml
+  - name: ccc
+    display_name: "Contra Costa College"
+    domain: ccc.cloudbank.2i2c.cloud
+    helm_chart: basehub
+    helm_chart_values_files:
+      - common.values.yaml
+      - ccc.values.yaml
+      - enc-ccc.secret.values.yaml
   - name: ccsf
     display_name: "City College SF"
     domain: ccsf.cloudbank.2i2c.cloud
diff --git a/config/clusters/cloudbank/enc-ccc.secret.values.yaml b/config/clusters/cloudbank/enc-ccc.secret.values.yaml
new file mode 100644
index 000000000..ac14d1ada
--- /dev/null
+++ b/config/clusters/cloudbank/enc-ccc.secret.values.yaml
@@ -0,0 +1,20 @@
+jupyterhub:
+    hub:
+        config:
+            CILogonOAuthenticator:
+                client_id: ENC[AES256_GCM,data:ZOEwhYIxCDSpRk5QzG9HDubnFw+M0KdrapGFL0PF9IYsZ3RTojYlcplh0CpRUoxHSiFc,iv:AlN6DBbEkc0Sk7HIhu4jub4R7z9wLP3jTJs5zzXHNns=,tag:VXkG2MYnvHVMRjphOnnYYA==,type:str]
+                client_secret: ENC[AES256_GCM,data:IkLdBYNKkMXKPXJSRt1jRpbfiXXBTvbLBQWjnR+hvzoQYu+4JE7zLtVz2Vn8UwO2arHEjNulb+eOz0IgOIIGZb5KWRURb+WGVK6Brirudrd7D4uJmtI=,iv:hV7vokA/1wMZPeMWN7Dhbx+Ou4hQmX3JD1gbvsRl3R4=,tag:3gm+0yLLlEdThjoqkVe3SA==,type:str]
+sops:
+    kms: []
+    gcp_kms:
+        - resource_id: projects/two-eye-two-see/locations/global/keyRings/sops-keys/cryptoKeys/similar-hubs
+          created_at: "2024-08-27T00:30:46Z"
+          enc: CiUA4OM7eL0/sHLt+pWMgPRLfvMR08l7KcEa8HfP3qxu+Ci48HlrEkkA5dG1Qzqr28AFzzeYsYD5jpW2e5JDYTff5xguW3duRPcuLDcbySaaZ8Wvz4Uy8dNMCPxgGFbeO80UEuJ2tWroFXhUVl/La5cY
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-08-27T00:30:47Z"
+    mac: ENC[AES256_GCM,data:73tlwkgL2Szi6jUEkzKbQ0tykcUzIjjPB8Ynm5eTL2ObsBB11TslBc8mtUz4HeGCkljd/qx6AOQxsNliCbgZvnLzeKTlBb/gKoNWsKT0r+oUQKU7LqYkRKGgQVJBsBjtYN1hyggnCotHOQX2pxBs8Q/+N7WMmuBLLZbD41Uv2yw=,iv:/x0Dwz13m45+xzpfia6jbW2DNdlPcTz5CO9gXd0DlpM=,tag:UZ0pywKFd02Uc1CmVcMX0g==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1