Merge pull request #7951 from sean-morris/main

[CloudBank] Add hmc

Author: sean-morris

config/clusters/cloudbank/cluster.yaml

@@ -229,6 +229,14 @@ hubs:
   - common.values.yaml
   - high.values.yaml
   - enc-high.secret.values.yaml
+- name: hmc
+  display_name: Harvey Mudd College
+  domain: hmc.cloudbank.2i2c.cloud
+  helm_chart: basehub
+  helm_chart_values_files:
+  - common.values.yaml
+  - hmc.values.yaml
+  - enc-hmc.secret.values.yaml
 - name: humboldt
   display_name: Cal Poly Humboldt
   domain: humboldt.cloudbank.2i2c.cloud

config/clusters/cloudbank/enc-hmc.secret.values.yaml

@@ -0,0 +1,15 @@
+jupyterhub:
+  hub:
+    config:
+      CILogonOAuthenticator:
+        client_id: ENC[AES256_GCM,data:76YgXZBAfu+XbpjbXkkUn5IVbYQMdCu6lAkcxP5btGDbwP7ZGuZD7bdBw7vvZ6EdVKwr,iv:zW9inZHDAmWuQpuiuehFdG1Xx2eDM16lpUnQ4bj9nNo=,tag:VL7sUdKQpD0HfxHzEdWlIA==,type:str]
+        client_secret: ENC[AES256_GCM,data:kKP+yic3u0cb+zin9sOPz4f6VkxrewuyIsmss9aP4D4MzVnlRrbxiS8GfDdAw04iCxeYGCsI2U0UjyFy84ppEGQ6xUqbl7W5uK4kN1HQV+eMXW4iuFU=,iv:UqNNFKPNmUOf5v3Z4i+xgubqqfNmLKvna3ms1vwvfDI=,tag:tOOfB2MQn86YY//luoIriQ==,type:str]
+sops:
+  gcp_kms:
+  - resource_id: projects/two-eye-two-see/locations/global/keyRings/sops-keys/cryptoKeys/similar-hubs
+    created_at: '2026-03-18T16:55:27Z'
+    enc: CiUA4OM7eC53eylntHSXcCQGl33HdEsKxCjJvixQotKYdLoPA9qxEkkAPHlbmUQCVnJqRYA9WZtoc3PZ/3pINzN93pkp/Hhc9g2MRNWKSTwuBWF7JGBN69Q2EW5DtxBfFyxWemfQL0ETK9wwSDKYgqYj
+  lastmodified: '2026-03-18T16:55:28Z'
+  mac: ENC[AES256_GCM,data:hyC5s8zoC0GC43wrzi4a0A+WXYbTPyOnG1iY6JcBFcSjBEDl6N0oV8tRuwFGWVckVg3OUGpV9SaGCK39GgefpHaEuLgiH4y3DROZdA13EG+DdNnns7usVKNFJAxh4aBSahKP0uGwCDQJSTR2R+T3o6lcGYV+QTZsH6KB00wFdZI=,iv:QTZZO8t6lTURtRSSkQOYJBJJS87i/0J6aC0BPrmJaWM=,tag:hrg7WU1LZetJhgxsp905Mg==,type:str]
+  unencrypted_suffix: _unencrypted
+  version: 3.11.0

config/clusters/cloudbank/hmc.values.yaml

@@ -0,0 +1,69 @@
+jupyterhub:
+  ingress:
+    hosts: [hmc.cloudbank.2i2c.cloud]
+    tls:
+    - hosts: [hmc.cloudbank.2i2c.cloud]
+      secretName: https-auto-tls
+  prePuller:
+    # hook prePuller shouldn't be enabled when configuring images in any other
+    # way than singleuser.image
+    hook:
+      enabled: true
+  singleuser:
+    memory:
+      guarantee: 512M
+      limit: 1G
+  custom:
+    2i2c:
+      add_staff_user_ids_to_admin_users: true
+      add_staff_user_ids_of_type: google
+    homepage:
+      templateVars:
+        org:
+          name: Harvey Mudd College
+          logo_url: https://www.hmc.edu/communications/wp-content/uploads/sites/19/2023/08/College-logo-sample-1.png
+          url: https://www.hmc.edu/
+        designed_by:
+          name: 2i2c
+          url: https://2i2c.org
+        operated_by:
+          name: CloudBank
+          url: http://cloudbank.org/
+        funded_by:
+          name: CloudBank
+          url: http://cloudbank.org/
+  hub:
+    config:
+      JupyterHub:
+        authenticator_class: cilogon
+      CILogonOAuthenticator:
+        oauth_callback_url: https://hmc.cloudbank.2i2c.cloud/hub/oauth_callback
+        allowed_idps:
+          https://sso.hmc.edu/idp:
+            default: true
+            username_derivation:
+              username_claim: email
+            allow_all: true
+          http://google.com/accounts/o8/id:
+            username_derivation:
+              username_claim: email
+            allowed_domains:
+            - humboldt.edu
+      Authenticator:
+        admin_users:
+        - ericvd@berkeley.edu
+        - sean.smorris@berkeley.edu
+        - dodds@cs.hmc.edu
+  cull:
+    # Cull after 30min of inactivity
+    every: 300
+    timeout: 1800
+    # No pods over 12h long
+    maxAge: 43200
+jupyterhub-home-nfs:
+  gke:
+    volumeId: projects/cb-1003-1696/zones/us-central1-b/disks/hub-nfs-homedirs-hmc
+
+nfs:
+  pv:
+    serverIP: storage-quota-home-nfs.hmc.svc.cluster.local

terraform/gcp/projects/cloudbank.tfvars

@@ -114,6 +114,10 @@ persistent_disks = {
     size        = 120
     name_suffix = "high"
   }
+  "hmc" = {
+    size        = 25
+    name_suffix = "hmc"
+  }
   "humboldt" = {
     size        = 200
     name_suffix = "humboldt"