From eb166444731421bf178845e2ba80b8c2e9db713d Mon Sep 17 00:00:00 2001 From: Alex Lebens Date: Mon, 3 Mar 2025 17:04:01 -0600 Subject: [PATCH] add code-server --- .../applications/code-server/Chart.yaml | 28 ++++++++++ .../templates/external-secret.yaml | 55 +++++++++++++++++++ .../code-server/templates/http-route.yaml | 30 ++++++++++ .../templates/persistent-volume-claim.yaml | 19 +++++++ .../applications/code-server/values.yaml | 49 +++++++++++++++++ 5 files changed, 181 insertions(+) create mode 100644 clusters/cl01tl/applications/code-server/Chart.yaml create mode 100644 clusters/cl01tl/applications/code-server/templates/external-secret.yaml create mode 100644 clusters/cl01tl/applications/code-server/templates/http-route.yaml create mode 100644 clusters/cl01tl/applications/code-server/templates/persistent-volume-claim.yaml create mode 100644 clusters/cl01tl/applications/code-server/values.yaml diff --git a/clusters/cl01tl/applications/code-server/Chart.yaml b/clusters/cl01tl/applications/code-server/Chart.yaml new file mode 100644 index 000000000..423a29ae5 --- /dev/null +++ b/clusters/cl01tl/applications/code-server/Chart.yaml @@ -0,0 +1,28 @@ +apiVersion: v2 +name: code-server +version: 1.0.0 +description: Code Server +keywords: + - code-server + - code + - ide +home: https://wiki.alexlebens.dev/doc/code-server-1WziinqCFS +sources: + - https://github.com/coder/code-server + - https://github.com/cloudflare/cloudflared + - https://hub.docker.com/r/linuxserver/code-server + - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template + - https://github.com/alexlebens/helm-charts/tree/main/charts/cloudflared +maintainers: + - name: alexlebens +dependencies: + - name: app-template + alias: code-server + repository: https://bjw-s.github.io/helm-charts/ + version: 3.7.1 + - name: cloudflared + alias: cloudflared + repository: http://alexlebens.github.io/helm-charts + version: 1.14.0 +icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/code-server.png +appVersion: 4.96.1 diff --git a/clusters/cl01tl/applications/code-server/templates/external-secret.yaml b/clusters/cl01tl/applications/code-server/templates/external-secret.yaml new file mode 100644 index 000000000..bfd61e68d --- /dev/null +++ b/clusters/cl01tl/applications/code-server/templates/external-secret.yaml @@ -0,0 +1,55 @@ +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: codeserver-password-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: codeserver-password-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: web + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/code-server/auth + metadataPolicy: None + property: PASSWORD + - secretKey: SUDO_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/code-server/auth + metadataPolicy: None + property: SUDO_PASSWORD + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: code-server-cloudflared-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: code-server-cloudflared-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: web + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: cf-tunnel-token + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cloudflare/tunnels/codeserver + metadataPolicy: None + property: token diff --git a/clusters/cl01tl/applications/code-server/templates/http-route.yaml b/clusters/cl01tl/applications/code-server/templates/http-route.yaml new file mode 100644 index 000000000..c9e249d6e --- /dev/null +++ b/clusters/cl01tl/applications/code-server/templates/http-route.yaml @@ -0,0 +1,30 @@ +apiVersion: gateway.networking.k8s.io/v1 +kind: HTTPRoute +metadata: + name: http-route-code-server + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: http-route-code-server + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: web + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + parentRefs: + - group: gateway.networking.k8s.io + kind: Gateway + name: traefik-gateway + namespace: traefik + hostnames: + - code-server.alexlebens.net + rules: + - matches: + - path: + type: PathPrefix + value: / + backendRefs: + - group: '' + kind: Service + name: code-server + port: 8443 + weight: 100 diff --git a/clusters/cl01tl/applications/code-server/templates/persistent-volume-claim.yaml b/clusters/cl01tl/applications/code-server/templates/persistent-volume-claim.yaml new file mode 100644 index 000000000..198804928 --- /dev/null +++ b/clusters/cl01tl/applications/code-server/templates/persistent-volume-claim.yaml @@ -0,0 +1,19 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: code-server-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: code-server-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + volumeMode: Filesystem + storageClassName: nfs-client + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 1Gi diff --git a/clusters/cl01tl/applications/code-server/values.yaml b/clusters/cl01tl/applications/code-server/values.yaml new file mode 100644 index 000000000..d18cdb048 --- /dev/null +++ b/clusters/cl01tl/applications/code-server/values.yaml @@ -0,0 +1,49 @@ +code-server: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + containers: + main: + image: + repository: ghcr.io/linuxserver/code-server + tag: 4.97.2@sha256:733c98b11faf45078c2a98cb1049fa10f386a725c893e867b82b4349ad4c5944 + pullPolicy: IfNotPresent + env: + - name: TZ + value: US/Central + - name: PUID + value: 1000 + - name: PGID + value: 1000 + - name: DEFAULT_WORKSPACE + value: /config + envFrom: + - secretRef: + name: codeserver-password-secret + resources: + requests: + cpu: 10m + memory: 128Mi + serviceAccount: + create: true + service: + main: + controller: main + ports: + http: + port: 8443 + targetPort: 8443 + protocol: HTTP + persistence: + config: + existingClaim: code-server-nfs-storage + advancedMounts: + main: + main: + - path: /config + readOnly: false +cloudflared: + existingSecretName: code-server-cloudflared-secret