init

clusters/cl01tl/applications/code-server/Chart.yaml

@@ -0,0 +1,12 @@
+apiVersion: v2
+name: code-server
+version: 0.0.1
+sources:
+  - https://github.com/coder/code-server
+  - https://github.com/linuxserver/docker-code-server
+  - https://gitlab.com/alexander-chernov/helm/code-server
+dependencies:
+  - name: code-server
+    version: 0.1.1
+    repository: https://charts.alekc.dev
+appVersion: "4.22.0"

clusters/cl01tl/applications/code-server/templates/external-secret.yaml

@@ -0,0 +1,23 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: codeserver-password-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /code-server/auth
+        metadataPolicy: None
+        property: password

clusters/cl01tl/applications/code-server/templates/persistent-volume-claim.yaml

@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: code-server-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: storage
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeMode: Filesystem
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/applications/code-server/values.yaml

@@ -0,0 +1,34 @@
+code-server:
+  image:
+    repository: linuxserver/code-server
+    tag: 4.89.1
+  ingress:
+    enabled: true
+    className: traefik
+    annotations:
+      traefik.ingress.kubernetes.io/router.entrypoints: websecure
+      traefik.ingress.kubernetes.io/router.tls: "true"
+      cert-manager.io/cluster-issuer: letsencrypt-issuer
+    hosts:
+      - host: codeserver.alexlebens.net
+        paths:
+          - path: /
+            pathType: Prefix
+    tls:
+      - secretName: codeserver-secret-tls
+        hosts:
+          - codeserver.alexlebens.net
+  env:
+    simple:
+      TZ: US/Central
+      DEFAULT_WORKSPACE: /config
+    full:
+      - name: SUDO_PASSWORD
+        valueFrom:
+          secretKeyRef:
+            key: password
+            name: codeserver-password-secret
+            optional: false
+  persistence:
+    existingClaim: code-server-nfs-storage
+    enabled: true