Validate config.Kubernetes does not conflict with backends.kubernetes

Fail template rendering when config.Kubernetes.Enabled is false but
backends.kubernetes.enabled is true, or when config.Kubernetes.Namespace
differs from backends.kubernetes.namespace. These conflicts would
produce an inconsistent gcfg where the chart enables the runner but
the config disables it.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: lucasrod16

charts/rstudio-connect/templates/NOTES.txt

@@ -38,6 +38,18 @@ Please consider removing this configuration value.
   {{- fail "\n\n`launcher.enabled` and `backends.kubernetes.enabled` cannot both be true"}}
 {{- end }}
 
+{{- if .Values.backends.kubernetes.enabled }}
+  {{- $configEnabled := dig "Kubernetes" "Enabled" "" .Values.config }}
+  {{- if or (eq (printf "%v" $configEnabled) "false") (eq (printf "%v" $configEnabled) "0") }}
+    {{- fail "\n\n`config.Kubernetes.Enabled` is set to false but `backends.kubernetes.enabled` is true. Remove `config.Kubernetes.Enabled` — the chart sets it automatically." }}
+  {{- end }}
+  {{- $configNs := dig "Kubernetes" "Namespace" "" .Values.config }}
+  {{- $chartNs := default $.Release.Namespace .Values.backends.kubernetes.namespace }}
+  {{- if and $configNs (ne $configNs $chartNs) }}
+    {{- fail (printf "\n\n`config.Kubernetes.Namespace` (%s) conflicts with `backends.kubernetes.namespace` (%s). Remove `config.Kubernetes.Namespace` — the chart sets it automatically from `backends.kubernetes.namespace`." $configNs $chartNs) }}
+  {{- end }}
+{{- end }}
+
 {{- if and .Values.launcher.useTemplates .Values.launcher.enabled }}
   {{- range $k,$v :=  .Values.launcher.launcherKubernetesProfilesConf }}
     {{- if hasKey $v "job-json-overrides" }}

charts/rstudio-connect/tests/kubernetes_test.yaml

@@ -19,6 +19,37 @@ tests:
       - failedTemplate:
           errorPattern: "launcher.enabled.*and.*backends.kubernetes.enabled.*cannot both be true"
 
+  - it: should fail when config.Kubernetes.Enabled conflicts with backends.kubernetes.enabled
+    template: NOTES.txt
+    set:
+      launcher:
+        enabled: false
+      backends:
+        kubernetes:
+          enabled: true
+      config:
+        Kubernetes:
+          Enabled: "false"
+    asserts:
+      - failedTemplate:
+          errorPattern: "config.Kubernetes.Enabled.*is set to false.*backends.kubernetes.enabled.*is true"
+
+  - it: should fail when config.Kubernetes.Namespace conflicts with backends.kubernetes.namespace
+    template: NOTES.txt
+    set:
+      launcher:
+        enabled: false
+      backends:
+        kubernetes:
+          enabled: true
+          namespace: correct-ns
+      config:
+        Kubernetes:
+          Namespace: wrong-ns
+    asserts:
+      - failedTemplate:
+          errorPattern: "config.Kubernetes.Namespace.*conflicts with.*backends.kubernetes.namespace"
+
   # Test backends.kubernetes.enabled creates configmap entries for job base
   - it: should create job.yaml in configmap when backends.kubernetes.enabled
     template: configmap.yaml