Refactor Argo CD application configuration to utilize a single source for the noble-platform, consolidating Helm chart management within kustomization.yaml. Update values.yaml to enable Helm inflation and revise documentation in README.md and apps/README.md to clarify the new structure and improve UI representation of resources.

clusters/noble/apps/kustomization.yaml

@@ -1,5 +1,6 @@
-# Plain Kustomize (namespaces + extra YAML only). Helm charts are **Application** sources in
-# **bootstrap/argocd/apps/noble-platform.yaml** so Argo CD does not need **kustomize --enable-helm**.
+# Single Argo CD **source** (**noble-platform** → **path: clusters/noble/apps**) so the UI shows the
+# full resource tree. Helm charts are inlined via **helmCharts**; requires **argocd-cm**
+# **kustomize.buildOptions: --enable-helm** (see **bootstrap/argocd/values.yaml**).
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
@@ -15,3 +16,60 @@ resources:
   - grafana-loki-datasource/loki-datasource.yaml
   - vault/unseal-cronjob.yaml
   - vault/cilium-network-policy.yaml
+
+helmCharts:
+  - name: kube-prometheus-stack
+    repo: https://prometheus-community.github.io/helm-charts
+    version: 82.15.1
+    releaseName: kube-prometheus
+    namespace: monitoring
+    valuesFile: kube-prometheus-stack/values.yaml
+    includeCRDs: true
+  - name: loki
+    repo: https://grafana.github.io/helm-charts
+    version: 6.55.0
+    releaseName: loki
+    namespace: loki
+    valuesFile: loki/values.yaml
+  - name: fluent-bit
+    repo: https://fluent.github.io/helm-charts
+    version: 0.56.0
+    releaseName: fluent-bit
+    namespace: logging
+    valuesFile: fluent-bit/values.yaml
+  - name: sealed-secrets
+    repo: https://bitnami-labs.github.io/sealed-secrets
+    version: 2.18.4
+    releaseName: sealed-secrets
+    namespace: sealed-secrets
+    valuesFile: sealed-secrets/values.yaml
+  - name: external-secrets
+    repo: https://charts.external-secrets.io
+    version: 2.2.0
+    releaseName: external-secrets
+    namespace: external-secrets
+    valuesFile: external-secrets/values.yaml
+  - name: vault
+    repo: https://helm.releases.hashicorp.com
+    version: 0.32.0
+    releaseName: vault
+    namespace: vault
+    valuesFile: vault/values.yaml
+  - name: kyverno
+    repo: https://kyverno.github.io/kyverno/
+    version: 3.7.1
+    releaseName: kyverno
+    namespace: kyverno
+    valuesFile: kyverno/values.yaml
+  - name: kyverno-policies
+    repo: https://kyverno.github.io/kyverno/
+    version: 3.7.1
+    releaseName: kyverno-policies
+    namespace: kyverno
+    valuesFile: kyverno/policies-values.yaml
+  - name: headlamp
+    repo: https://kubernetes-sigs.github.io/headlamp/
+    version: 0.40.1
+    releaseName: headlamp
+    namespace: headlamp
+    valuesFile: headlamp/values.yaml