From 8200554f3fb5540796fa6630daf754ed3d463275 Mon Sep 17 00:00:00 2001
From: nick-gorse <nick@olb42.com>
Date: Fri, 29 May 2026 12:16:24 +0100
Subject: [PATCH] Enable argoplane UI extensions (metrics, networking, logs,
 events)

---
 manifest/overlays/production/argocd-cm-patch.yaml   |  8 ++++----
 .../overlays/production/argocd-rbac-cm-patch.yaml   |  2 --
 .../overlays/production/argocd-server-patch.yaml    | 13 +++++++++++++
 3 files changed, 17 insertions(+), 6 deletions(-)

diff --git a/manifest/overlays/production/argocd-cm-patch.yaml b/manifest/overlays/production/argocd-cm-patch.yaml
index 7e0e0fb..1908250 100644
--- a/manifest/overlays/production/argocd-cm-patch.yaml
+++ b/manifest/overlays/production/argocd-cm-patch.yaml
@@ -48,16 +48,16 @@ data:
       - '.metadata.annotations."autoscaling.alpha.kubernetes.io/current-metrics"'
   extension.config.metrics: |
     services:
-      - '.url."http://argoplane-metrics-backend.argocd.svc:8080"'
+      - url: http://argoplane-metrics-backend.argocd.svc:8080
   extension.config.networking: |
     services:
-      - '.url."http://argoplane-networking-backend.argocd.svc:8082"'
+      - url: http://argoplane-networking-backend.argocd.svc:8082
   extension.config.logs: |
     services:
-      - '.url."http://argoplane-logs-backend.argocd.svc:8083"'
+      - url: http://argoplane-logs-backend.argocd.svc:8083
   extension.config.events: |
     services:
-      - '.url."http://argoplane-events-backend.argocd.svc:8085"'
+      - url: http://argoplane-events-backend.argocd.svc:8085
   resource.customizations.ignoreResourceUpdates.discovery.k8s.io_EndpointSlice: |
     jsonPointers:
       - /metadata
diff --git a/manifest/overlays/production/argocd-rbac-cm-patch.yaml b/manifest/overlays/production/argocd-rbac-cm-patch.yaml
index 20eca6b..02aba06 100644
--- a/manifest/overlays/production/argocd-rbac-cm-patch.yaml
+++ b/manifest/overlays/production/argocd-rbac-cm-patch.yaml
@@ -13,10 +13,8 @@ data:
     g, homepage, role:readonly
     g, role:admin, role:readonly
     p, role:admin, extensions, invoke, metrics, allow
-    p, role:admin, extensions, invoke, backups, allow
     p, role:admin, extensions, invoke, networking, allow
     p, role:admin, extensions, invoke, logs, allow
-    p, role:admin, extensions, invoke, vulnerabilities, allow
     p, role:admin, extensions, invoke, events, allow
     
   policy.default: role:readonly
diff --git a/manifest/overlays/production/argocd-server-patch.yaml b/manifest/overlays/production/argocd-server-patch.yaml
index 0571afb..afbc485 100644
--- a/manifest/overlays/production/argocd-server-patch.yaml
+++ b/manifest/overlays/production/argocd-server-patch.yaml
@@ -17,6 +17,19 @@ spec:
           securityContext:
             runAsUser: 1000
             allowPrivilegeEscalation: false
+        # ArgoPlane UI extension bundles. Copies only the enabled extensions'
+        # JS bundles into the shared /tmp/extensions volume. Keep ENABLED_EXTENSIONS
+        # in sync with the enabled backends in apps/argoplane.
+        - name: argoplane-extensions
+          image: ghcr.io/natrontech/argoplane-ui-extensions:1.4.1
+          env:
+            - name: ENABLED_EXTENSIONS
+              value: "metrics,networking,logs,events"
+          volumeMounts:
+            - name: extensions
+              mountPath: /tmp/extensions/
+          securityContext:
+            allowPrivilegeEscalation: false
       containers:
         - name: argocd-server
           volumeMounts: