fix(ardac2prd): restore Guppy sync and developer visibility

ardac2prd/cluster-level-resources/cluster-values.yaml

@@ -21,6 +21,9 @@
   configuration:
     enabled: false
 
+custom-objects:
+  enabled: true
+
 cert-manager:
   enabled: true
 
@@ -62,7 +65,7 @@
   amiSelectorName: "amazon-eks-node-al2023-x86_64-standard-1.36-*"
   amiOwner: "amazon"
   enabled: true
   usaAlias: true # Temporary workaround for an upstream chart/template typo; remove after upgrading to a chart version that correctly uses `useAlias` only.
   useAlias: true
   alias: "al2023@v20260724"
   selectorTag: ardac2prd

ardac2prd/cluster-values/custom-objects/developer-rbac.yaml

@@ -0,0 +1,142 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: ardac-developer-power-role
+  namespace: default
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+      - pods/exec
+    verbs:
+      - create
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - batch
+    resources:
+      - cronjobs
+      - jobs
+    verbs:
+      - create
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - pods/log
+    verbs:
+      - get
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+      - endpoints
+      - events
+      - persistentvolumeclaims
+      - serviceaccounts
+      - services
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - apps
+    resources:
+      - controllerrevisions
+      - daemonsets
+      - deployments
+      - replicasets
+      - statefulsets
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - autoscaling
+    resources:
+      - horizontalpodautoscalers
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - discovery.k8s.io
+    resources:
+      - endpointslices
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - external-secrets.io
+    resources:
+      - externalsecrets
+      - secretstores
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - networking.k8s.io
+    resources:
+      - ingresses
+      - networkpolicies
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - policy
+    resources:
+      - poddisruptionbudgets
+    verbs:
+      - get
+      - list
+      - watch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: ardac-developers-local-power
+  namespace: default
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ardac-developer-power-role
+subjects:
+  - apiGroup: rbac.authorization.k8s.io
+    kind: Group
+    name: ardac-developers
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: ardac-developer-argocd-view-role
+  namespace: argocd
+rules:
+  - apiGroups:
+      - argoproj.io
+    resources:
+      - applications
+    verbs:
+      - get
+      - list
+      - watch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: ardac-developers-argocd-view
+  namespace: argocd
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ardac-developer-argocd-view-role
+subjects:
+  - apiGroup: rbac.authorization.k8s.io
+    kind: Group
+    name: ardac-developers

ardac2prd/portal.ardac.org/values.yaml

@@ -14,6 +14,7 @@
   dev: false
   externalSecrets:
     deploy: true
+    apiVersion: external-secrets.io/v1beta1
   postgres:
     dbCreate: false
     externalSecret: "ardac2prd-aurora-master-password"
@@ -196,7 +197,7 @@
         args:
           - "--NotebookApp.base_url=/lw-workspace/proxy/"
           - "--NotebookApp.default_url=/lab"
           - "--NotebookApp.password=''" # pragma: allowlist secret
           - "--NotebookApp.token=''"
           - "--NotebookApp.shutdown_no_activity_timeout=5400"
           - "--NotebookApp.quit_button=False"