Friendly ping to @2i2c-org/tech-team ➡️ Do you see any reason for not merging this (given the context in #315 (comment))? (Other than there are no docs around this yet, but promise to add them once this gets approved)

Here's the comment where we decided which one to implement: #315 (comment)

It looks like the main thing that this does is adds our CILogon credentials to the deployment configuration etc. So is this correct:

1. We have set up an application on CILogon, and this gave us some kind of credential which we're adding in this PR.
2. If a community wants to use CILogon, in their hub configuration we'll need to configure the regex to support it. Here's an example of the configuration we would need:
   

   infrastructure/config/hubs/cloudbank.cluster.yaml

   Lines 358 to 367 in d3da0f3

   	hub:
   	config:
   	Authenticator:
   	admin_users: &mills_admins
   	- <staff_google_ids>
   	- [email protected]
   	- [email protected]
   	- [email protected]
   	- [email protected]
   	username_pattern: '^(.+@mills\.edu|yuvipanda@2i2c\.org|choldgraf@2i2c\.org|georgianaelena@2i2c\.org|sgibson@2i2c\.org|erik@2i2c\.org|damianavila@2i2c\.org|aculich@berkeley\.edu|jpercy@berkeley\.edu|deployment-service-check)$'

3. So once this PR is merged, we'll be able to add the hub authentication configuration to make Auth0 provide a "CILogon" button for authentication.

Is that right?

I follow @choldgraf's suggestion and merge this, then track follow-up doc PRs in the original issue. Thanks @choldgraf!