Add the config files to the new cluster

config/clusters/2i2c/binderhub-ui-demo.values.yaml

@@ -0,0 +1,106 @@
+jupyterhub:
+  ingress:
+    hosts:
+      - hub.binderhub-ui-demo.2i2c.cloud
+    tls:
+      - secretName: https-auto-tls
+        hosts:
+          - hub.binderhub-ui-demo.2i2c.cloud
+  custom:
+    2i2c:
+      add_staff_user_ids_to_admin_users: true
+      add_staff_user_ids_of_type: "github"
+    jupyterhubConfigurator:
+      enabled: false
+    binderhubUI:
+      enabled: true
+    homepage:
+      templateVars:
+        org:
+          name: Demo binderhub UI with binderhub-service
+          url: https://2i2c.org
+          logo_url: https://2i2c.org/media/logo.png
+        designed_by:
+          name: 2i2c
+          url: https://2i2c.org
+        operated_by:
+          name: 2i2c
+          url: https://2i2c.org
+        funded_by:
+          name: ""
+          url: ""
+  singleuser:
+    # This is copied from https://github.com/jupyterhub/binderhub/blob/c6c5dc8fe73f81ca538c47b420b33f317c3aa8ae/helm-chart/binderhub/values.yaml
+    # We should update this as soon as the upstream updates
+    # FIXME: investigate incorporating this configuration
+    #        in the configuration defaults coming from basehub
+    #        potentially taking into account the value of custom.binderhubUI.enabled
+    #        to avoid specifying it over and over again for each new hub using the
+    #        binderhub UI
+    cmd:
+      # start jupyterlab server *if available*
+      # fallback on jupyter-notebook
+      - python3
+      - "-c"
+      - |
+        import os
+        import sys
+
+        try:
+            import jupyterlab
+            import jupyterlab.labapp
+            major = int(jupyterlab.__version__.split(".", 1)[0])
+        except Exception as e:
+            print("Failed to import jupyterlab: {e}", file=sys.stderr)
+            have_lab = False
+        else:
+            have_lab = major >= 3
+
+        if have_lab:
+            # technically, we could accept another jupyter-server-based frontend
+            print("Launching jupyter-lab", file=sys.stderr)
+            exe = "jupyter-lab"
+        else:
+            print("jupyter-lab not found, launching jupyter-notebook", file=sys.stderr)
+            exe = "jupyter-notebook"
+
+        # launch the notebook server
+        os.execvp(exe, sys.argv)
+    storage:
+      type: none
+  hub:
+    services:
+      binder:
+        # FIXME: ref https://github.com/2i2c-org/binderhub-service/issues/57
+        # for something more readable and requiring less copy-pasting
+        url: http://binderhub-ui-demo-binderhub-service:8090
+        display: false
+    config:
+      BinderSpawnerMixin:
+        auth_enabled: true
+      JupyterHub:
+        authenticator_class: github
+      GitHubOAuthenticator:
+        oauth_callback_url: https://binderhub-ui-demo.2i2c.cloud/hub/oauth_callback
+
+binderhub-service:
+  enabled: true
+  ingress:
+    enabled: true
+    hosts:
+      - binderhub-ui-demo.2i2c.cloud
+    tls:
+      - secretName: https-auto-tls
+        hosts:
+          - binderhub-ui-demo.2i2c.cloud
+  config:
+    BinderHub:
+      hub_url: https://hub.binderhub-ui-demo.2i2c.cloud
+      badge_base_url: https://binderhub-ui-demo.2i2c.cloud
+      auth_enabled: true
+      enable_api_only_mode: false
+      image_prefix: us-central1-docker.pkg.dev/two-eye-two-see/binderhub-ui-demo-registry/binderhub-service-
+  # The password to the registry is stored encrypted in the hub's encrypted config file
+  buildPodsRegistryCredentials:
+    server: "https://us-central1-docker.pkg.dev"
+    username: "_json_key"

config/clusters/2i2c/enc-binderhub-ui-demo.secret.values.yaml

@@ -0,0 +1,23 @@
+binderhub-service:
+    buildPodsRegistryCredentials:
+        password: ENC[AES256_GCM,data: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,iv:5Sobvu+/bAQi+QCidA+CV9L6pPcV3y7G4dnFlAe9LBE=,tag:gFEO2EF1n4lqGGXr8AFCUg==,type:str]
+jupyterhub:
+    hub:
+        config:
+            GitHubOAuthenticator:
+                client_id: ENC[AES256_GCM,data:f5y+pUy+68Zje3YK5/Wj6e+9Jxk=,iv:3T9S9PrRjuJYrOovbd8She7xuWSOSEHZM0Exgh8MzyA=,tag:6fTW5zwfhCbeuNtjczq2tg==,type:str]
+                client_secret: ENC[AES256_GCM,data:Z1XDr41p9QmewcUAzOudW91Cr3DFnikveK5io2kTIbsdJ4SEhk1tUQ==,iv:vchLWpcUUzSOaatVicy2r6Iq/WxqyFpxlakVswC7ViI=,tag:/Mbw4GgwxlDnYbvOPtaL6w==,type:str]
+sops:
+    kms: []
+    gcp_kms:
+        - resource_id: projects/two-eye-two-see/locations/global/keyRings/sops-keys/cryptoKeys/similar-hubs
+          created_at: "2023-09-18T19:00:41Z"
+          enc: CiUA4OM7eFioG9yDgVwKtc0cYrU65GNcqMSDuUgnuXuq3KW9dRI6EkkAq2nhVV2TFrZOq5jktjMd4TQF1lwH/08tAyGd3vMfBmdd3Xdy3bAUUHhrPXcK6QabMRYdXPzQzgB+oBGaqOsJO7D7jT9NpeCn
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-05-22T09:37:49Z"
+    mac: ENC[AES256_GCM,data:VMhtLKg3d/fGoebkQ9ls8FhGnS2v4UO0OkyeC73zd3gcTPAcuvF4tyN4/a3GjP6e3nrrIUAI69kp5D2I2zc0aQIVGkZHS0z9YiBbRBIGHMjuCvnttl89hcsaQ1QjhKUPyI7VUu9rqXADige25OPNDJciZNSTem7Rt/V2lgwvDnQ=,iv:yRpE3PckCIlPwQ40swsTI8imZBbcnm3jQamMyDjqmtk=,tag:KB73g44EzQlalSnAQSjw5Q==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1