Add must hub in catalystproject-africa cluster

config/clusters/catalystproject-africa/cluster.yaml

@@ -26,3 +26,11 @@ hubs:
       - common.values.yaml
       - nm-aist.values.yaml
       - enc-nm-aist.secret.values.yaml
+  - name: must
+    display_name: "MUST"
+    domain: must.af.catalystproject.2i2c.cloud
+    helm_chart: basehub
+    helm_chart_values_files:
+      - common.values.yaml
+      - must.values.yaml
+      - enc-must.secret.values.yaml

config/clusters/catalystproject-africa/enc-must.secret.values.yaml

@@ -0,0 +1,20 @@
+jupyterhub:
+    hub:
+        config:
+            CILogonOAuthenticator:
+                client_id: ENC[AES256_GCM,data:2E7tJnf4SpX8K+VwbMK13MLc6v3Z0x3su2pCraZGaFL4qXLagBRqT/VIxafTzmQ3NJwo,iv:V/Z6ljoJXjLpsnvrXgGPFRwLLp6Ukmi1EUc0dDxkc8A=,tag:zgud3MrNP78bwud8c2mw/Q==,type:str]
+                client_secret: ENC[AES256_GCM,data:fyzPqoP2dAdkSfOTc/XF7JCKrt1lghgKWCInAd+O2fIRC1/r2W3Z58brsvikApSjOg4JDylii9rBhH7WnsEkqqYrOtMjciwnvQC028pk/SZ0aHsohQk=,iv:MpLIXxMwwiSd8ABiy+bKD5F+HyJ8WL6EbLt9KwzBKdw=,tag:FIiOa9W5aQl1z+3clAItPA==,type:str]
+sops:
+    kms: []
+    gcp_kms:
+        - resource_id: projects/two-eye-two-see/locations/global/keyRings/sops-keys/cryptoKeys/similar-hubs
+          created_at: "2023-11-10T14:12:21Z"
+          enc: CiUA4OM7eFJPLVZ4EC2xTOPEmjgFGeekvAhGvuFPz4vPMEGadQW/EkkAq2nhVe2r7M8dfw5C1IUcVq+XV+u18JYFrM9cdvyq5CopDsmuM4a2rbyT2LqkxzcZaNl4lM9lLineOFRMkxa3jLm6IIYyTpOl
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2023-11-10T14:12:22Z"
+    mac: ENC[AES256_GCM,data:BZrtuglIXecAYRD0qyx33zSJwhPQSLzVl3MWBiYmfzT2DsE+6uZImTbSH2PEi0QlsFei5DOPe3yfkTKy+ldOHdcegJ9slWb8qY/mETgr+gRvS2t3smF1rSKptvbj8Mq9EqaNsQqlumVJDcGwgbQtvPveaMQ2eR6eKCxtVzEbKWI=,iv:Yo0CUYTVSGkpTAzPJBlvPmnKTiewbNYUEHkTtoMOkW8=,tag:woxje0oFDhuH8D5hkK2ZBg==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1

config/clusters/catalystproject-africa/must.values.yaml

@@ -0,0 +1,40 @@
+jupyterhub:
+  ingress:
+    hosts: [must.af.catalystproject.2i2c.cloud]
+    tls:
+      - hosts: [must.af.catalystproject.2i2c.cloud]
+        secretName: https-auto-tls
+  custom:
+    2i2c:
+      add_staff_user_ids_to_admin_users: true
+      add_staff_user_ids_of_type: "google"
+    homepage:
+      templateVars:
+        org:
+          name: "MUST"
+          url: https://www.must.ac.mw/
+          logo_url: https://www.must.ac.mw/wp-content/themes/mustwebsite/images/must-logo.png
+        designed_by:
+          name: "2i2c"
+          url: https://2i2c.org
+        operated_by:
+          name: "2i2c"
+          url: https://2i2c.org
+        funded_by:
+          name: Chan Zuckerberg Initiative - Open Science
+          url: "https://chanzuckerberg.com/science/programs-resources/open-science/"
+  hub:
+    config:
+      JupyterHub:
+        authenticator_class: cilogon
+      CILogonOAuthenticator:
+        oauth_callback_url: https://must.af.catalystproject.2i2c.cloud/hub/oauth_callback
+        allowed_idps:
+          http://google.com/accounts/o8/id:
+            username_derivation:
+              username_claim: email
+            allowed_domains:
+              - nm-aist.ac.tz
+      Authenticator:
+        admin_users:
+          - "bkankuzi@must.ac.mw"