Added a power legacy user

[vevetron]

Description

@edasmalchi asks to be able to create power legacy image access to help with debugging stuff: cal-itp/data-analyses#1356

Type of change

• Bug fix (non-breaking change which fixes an issue)
• New feature
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation

How has this been tested?

Nein.

Post-merge follow-ups

Document any actions that must be taken post-merge to deploy or otherwise implement the changes in this PR (for example, running a full refresh of some incremental model in dbt). If these actions will take more than a few hours after the merge or if they will be completed by someone other than the PR author, please create a dedicated follow-up issue and link it here to track resolution.

• No action required
• Actions required (specified below)

[github-actions]

The following changes will be applied to the production Kubernetes cluster upon merge.

BE AWARE this may not reveal changes that have been manually applied to the cluster getting undone—applying manual changes to the cluster should be avoided.

jupyterhub, continuous-image-puller, DaemonSet (apps) has changed:
...
              - echo "Pulling complete"
            securityContext:
              allowPrivilegeEscalation: false
              runAsGroup: 65534
              runAsUser: 65534
+         - name: image-pull-singleuser-profilelist-3
+           image: ghcr.io/cal-itp/data-infra/jupyter-singleuser:2024.3.27
+           command:
+             - /bin/sh
+             - -c
+             - echo "Pulling complete"
+           securityContext:
+             allowPrivilegeEscalation: false
+             runAsGroup: 65534
+             runAsUser: 65534
        containers:
          - name: pause
            image: registry.k8s.io/pause:3.9
            securityContext:
              allowPrivilegeEscalation: false
...
jupyterhub, hub, ConfigMap (v1) has changed:
...
          configuration item if not None
          """
          data = get_config(key)
          if data is not None:
              setattr(cparent, name, data)
-   checksum_hook-image-puller: "f1bbdb8e153dba2ccb4acad437eb79ca814dac3306e255bd503b8c00a8ca1d04"
+   checksum_hook-image-puller: "bcedf26754cf558433ca75ae3fa6a6694c62219a2a25f54ff7406d3c3d7e2b2b"
jupyterhub, hub, Deployment (apps) has changed:
...
          release: jupyterhub
          hub.jupyter.org/network-access-proxy-api: "true"
          hub.jupyter.org/network-access-proxy-http: "true"
          hub.jupyter.org/network-access-singleuser: "true"
        annotations:
-         checksum/config-map: 4382487804ba175886bda74955ad5a72010e8d5c2d1410ad7db2fffe93fa1003
-         checksum/secret: eb4e6aee688ed69fcd8b9f0935a61a611408299de8be02920d9848cc744c7461
+         checksum/config-map: 3f4f09154ff91af7fc3c6ea6feccb144213f3e1470a55a578fb41c5f25499105
+         checksum/secret: 8dfd72a51b544878531b9972893dd6c99db993f988cc926aabab682bfcd5e49f
      spec:
        tolerations:
          - effect: NoSchedule
            key: hub.jupyter.org/dedicated
            operator: Equal
...
jupyterhub, hub, Secret (v1) has changed:
...
    name: hub
  data:
    hub.config.ConfigurableHTTPProxy.auth_token: 'REDACTED # (64 bytes)'
    hub.config.CryptKeeper.keys: 'REDACTED # (64 bytes)'
    hub.config.JupyterHub.cookie_secret: 'REDACTED # (64 bytes)'
-   values.yaml: '-------- # (11829 bytes)'
+   values.yaml: '++++++++ # (12166 bytes)'
  type: Opaque