feat: add Canvas auth to default-staging (#7964)

Author: agoose77

config/clusters/utoronto/cluster.yaml

@@ -16,6 +16,8 @@ hubs:
   helm_chart: basehub
   helm_chart_values_files:
   - common.values.yaml
+  - common-staging.values.yaml
+  - enc-common-staging.secret.values.yaml
   - default-common.values.yaml
   - default-staging.values.yaml
   - enc-default-staging.secret.values.yaml

config/clusters/utoronto/common-staging.values.yaml

@@ -0,0 +1,21 @@
+jupyterhub:
+  hub:
+    config:
+      JupyterHub:
+        authenticator_class: generic-oauth
+      GenericOAuthenticator:
+        token_url: https://utoronto-dev.instructure.com/login/oauth2/token
+        userdata_url: https://utoronto-dev.instructure.com/api/v1/users/self/profile
+        authorize_url: https://utoronto-dev.instructure.com/login/oauth2/auth
+        username_claim: sis_user_id
+        scope:
+        - url:GET|/api/v1/users/:user_id/profile
+        - url:GET|/api/v1/users/self/groups
+        - url:GET|/api/v1/courses
+        admin_users:
+        - holla162
+        - pandayuv
+        - elenageo
+        - wonj202
+        - grahamj
+        - huaani1

config/clusters/utoronto/default-staging.values.yaml

@@ -6,8 +6,9 @@ jupyterhub:
       secretName: https-auto-tls
   hub:
     config:
-      CILogonOAuthenticator:
+      GenericOAuthenticator:
         oauth_callback_url: https://staging.utoronto.2i2c.cloud/hub/oauth_callback
+
     db:
       pvc:
         # limit was increased because of https://github.com/2i2c-org/infrastructure/issues/2288

config/clusters/utoronto/enc-common-staging.secret.values.yaml

@@ -0,0 +1,15 @@
+jupyterhub:
+  hub:
+    config:
+      GenericOAuthenticator:
+        client_id: ENC[AES256_GCM,data:AhLbD8TwqS6tSdp3UsbzUD0V,iv:aIepSssKhRBr9wjo2+k+IlXspLbmANqOUMbuMtXd43A=,tag:LGrEtgT6Kfbi5jXeEyD0Og==,type:str]
+        client_secret: ENC[AES256_GCM,data:g33Eg1nUA3AeVHN6vWzdQbkmjZbWe6PbBYHIgLOavw1jW3urQv8ezGzYRZGVDW2kGvvjGKX4uehLeBBPHsLbDg==,iv:5zbTwqXhybIr78fYoG5fq2OQ9pafSHMj0eRpNXiJmHQ=,tag:wlMrTwSApbItrMYAPiHEOQ==,type:str]
+sops:
+  gcp_kms:
+  - resource_id: projects/two-eye-two-see/locations/global/keyRings/sops-keys/cryptoKeys/similar-hubs
+    created_at: '2026-03-20T15:10:26Z'
+    enc: CiUA4OM7eAniVXYeM2TCLg9E7XJTUQecoD8CuEJKLnj/GCljwj8lEkkAPHlbmbXSNjkV1HyPh8pkV7k8r7l8/QxVAT1H9lUXnS0+M5bF14dt44NmbCR8T7IPfJWaS8Zh2Qb8PyC2imh9HxzWOOnl//h4
+  lastmodified: '2026-03-20T15:10:36Z'
+  mac: ENC[AES256_GCM,data:+xgSP3aGd5sEDAzXm8RbHkx5AbWwUyc/JLBiIf9PcmMYkLh60+vQA6VgGY9S1pV1wEaLlX7pmYYh9rtMbfvkOWHRpgxnvv8PZ1Wtm7QxO4YayMpFkbAO3XPvZPYnFJuvqFwwmfbYeQOzibiJnJxFdVV6HuNKRnDXZLBWovGzPiE=,iv:dLPraRkc7yuQDCPO4xo3umxiTYSK7/NWc8EFT1pXlCM=,tag:cDYfn31TzFGqtYrOXtyRhw==,type:str]
+  unencrypted_suffix: _unencrypted
+  version: 3.11.0

config/clusters/utoronto/enc-default-staging.secret.values.yaml

@@ -9,16 +9,11 @@ jupyterhub:
         client_id: ENC[AES256_GCM,data:f/B+xYi5Ucgq1XF5Whw6JIcpm+/PfgihsZ242Qpp0xkl/qk91Ob/iKNo5p+5t9x+h/JE,iv:g7PsNIqOpA0nvhvz0xqJV4UpciJRkVSaCnVWz4ZM11E=,tag:DuaZCTWCMjlkeKuxzbsv1A==,type:str]
         client_secret: ENC[AES256_GCM,data:zHHZQGSFHogWOWH3g3xDhS6yPdRisNGECpGxRs7IApWCbCvDa7QekFKzKV4RbpDj6ELZYydBHMbYxY+ay4HFDtsWyI+IZOS6qeTy42o49CnmRi1BOb8=,iv:LvuQDRrNbq/DSwuZvUxRy5+pdm6vxJ8F1NBrrLhoFlA=,tag:b8kWteBh1xPsq5l+JDJ99g==,type:str]
 sops:
-  kms: []
   gcp_kms:
   - resource_id: projects/two-eye-two-see/locations/global/keyRings/sops-keys/cryptoKeys/similar-hubs
     created_at: '2023-06-09T17:58:27Z'
     enc: CiUA4OM7eFgChMU6uQT4OdL4RmlMbnzxSgBhN6WXaUPV1tHqiX4lEkkAyiwFHNTf/SHKa+LBb7KpqzeHLf1whx5UMrh9WD7Kyppg86ig8guqIIisNThlw06xI1BNRg+ss9hFNY7H3jfuJMHaSrnD2VG9
-  azure_kv: []
-  hc_vault: []
-  age: []
-  lastmodified: '2023-06-09T17:58:32Z'
-  mac: ENC[AES256_GCM,data:AIM2wSV9//kTL2kVYRdGphA4wlprZi2e0u27mfJuhrdZjZWN5KORXhABnRjQ3ePR2Go00dtbH/2lJFL1JNAdgb8ngfNsBRzdOJRtA1BWyFugZx+hF0ZER3WT5B8CS2gVetRRP6qpK7EvOkQhJqWIJkz5sSlez9hLUTyvtxONf4g=,iv:00aq/zbZvLfI/91NEgHbrKU9y+OoaiTlq6bdz4J7nkQ=,tag:ZnhE19d70y8G/gqtRGA4YA==,type:str]
-  pgp: []
+  lastmodified: '2026-03-20T15:11:04Z'
+  mac: ENC[AES256_GCM,data:nmhbRe5pItJUK4ru8s1HHulfFU1ktT1XpiqSGgtdRUXdg5lNKZF5zHoTRo0ZuYMIVItvzi1M+DKV4/QC7anbhGamtL91UziS6Q16btinnS2nJ1LWmwwD2S3CFgVS+cKTfYw67ErBWH/sk+Ux4+MXWBLQup/MvUMg85zpKWYnV98=,iv:DQrk1blJWSa9ZkYkI43SxIrlTmVFb74DnGwt1CG5joY=,tag:ZbF5NUywSc2koLAABAxxmw==,type:str]
   unencrypted_suffix: _unencrypted
-  version: 3.7.3
+  version: 3.11.0