code-server helm

No introduction found. Create it?

Install

Install with:

helm repo add app-template oci://ghcr.io/bjw-s-labs/charts/
helm install code-server app-template/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (1 out of 6)

NameRepoStarsVersionTimestamp
code-serverJJGadgets/Biohazard885.0.14 days ago

Values

See the most popular values for this chart:

KeyTypes
controllers.code-server.containers.app.args[] (4)
- --auth
- none
- --disable-telemetry
- --disable-update-check
- --user-data-dir
- /config/.code-server
- --extensions-dir
- /config/.code-server
- --port
- "8080"
- /config
string
controllers.code-server.containers.app.env.TZ (4)
America/New_York
string
controllers.code-server.containers.app.env.DISABLE_TELEMETRY (1)
true
string
controllers.code-server.containers.app.env.EXTENSIONS_GALLERY (1)
{"serviceUrl": "https://marketplace.visualstudio.com/_apis/public/gallery","itemUrl": "https://marketplace.visualstudio.com/items"}
string
controllers.code-server.containers.app.env.HOME (1)
/home/ewatkins
string
controllers.code-server.containers.app.env.LOGNAME (1)
ewatkins
string
controllers.code-server.containers.app.env.PATH (1)
/home/ewatkins/.local/bin:/home/linuxbrew/.linuxbrew/bin:/home/linuxbrew/.linuxbrew/sbin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
string
controllers.code-server.containers.app.env.SOPS_AGE_KEY_FILE (1)
/var/run/secrets/sops/age.key
string
controllers.code-server.containers.app.env.TALOSCONFIG (1)
/home/ewatkins/projects/talos-cluster/talos/clusterconfig/talosconfig
string
controllers.code-server.containers.app.env.USER (1)
ewatkins
string
controllers.code-server.containers.app.image.repository (4)
ghcr.io/coder/code-server
string
controllers.code-server.containers.app.image.tag (4)
4.131.0
string
controllers.code-server.containers.app.resources.limits.memory (3)
2Gi
string
controllers.code-server.containers.app.resources.requests.cpu (3)
50m
string
controllers.code-server.containers.app.resources.requests.memory (3)
256Mi
string
controllers.code-server.containers.app.probes.liveness.enabled (2)
true
boolean
controllers.code-server.containers.app.probes.liveness.custom (1)
true
boolean
controllers.code-server.containers.app.probes.liveness.spec.exec.command[] (1)
- curl
- -sf
- http://127.0.0.1:8080/healthz
string
controllers.code-server.containers.app.probes.liveness.spec.failureThreshold (1)
3
number
controllers.code-server.containers.app.probes.liveness.spec.initialDelaySeconds (1)
15
number
controllers.code-server.containers.app.probes.liveness.spec.periodSeconds (1)
30
number
controllers.code-server.containers.app.probes.liveness.spec.timeoutSeconds (1)
5
number
controllers.code-server.containers.app.probes.readiness.enabled (2)
true
boolean
controllers.code-server.containers.app.probes.readiness.custom (1)
true
boolean
controllers.code-server.containers.app.probes.readiness.spec.exec.command[] (1)
- curl
- -sf
- http://127.0.0.1:8080/healthz
string
controllers.code-server.containers.app.probes.readiness.spec.failureThreshold (1)
3
number
controllers.code-server.containers.app.probes.readiness.spec.initialDelaySeconds (1)
15
number
controllers.code-server.containers.app.probes.readiness.spec.periodSeconds (1)
30
number
controllers.code-server.containers.app.probes.readiness.spec.timeoutSeconds (1)
5
number
controllers.code-server.containers.app.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.code-server.containers.app.securityContext.readOnlyRootFilesystem (2)
false
boolean
controllers.code-server.containers.app.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.code-server.containers.oauth2-proxy.args[] (1)
- --https-address=0.0.0.0:8443
- --tls-cert-file=/tls/tls.crt
- --tls-key-file=/tls/tls.key
- --upstream=http://127.0.0.1:8080
- --redirect-url=https://code.ewatkins.dev/oauth2/callback
- --provider=oidc
- --oidc-issuer-url=https://keycloak.ewatkins.dev/realms/master
- --client-id=code-server
- --email-domain=*
- --code-challenge-method=S256
- --skip-provider-button
- --cookie-secure=true
string
controllers.code-server.containers.oauth2-proxy.env.OAUTH2_PROXY_CLIENT_SECRET.valueFrom.secretKeyRef.key (1)
client-secret
string
controllers.code-server.containers.oauth2-proxy.env.OAUTH2_PROXY_CLIENT_SECRET.valueFrom.secretKeyRef.name (1)
code-server-secret
string
controllers.code-server.containers.oauth2-proxy.env.OAUTH2_PROXY_COOKIE_SECRET.valueFrom.secretKeyRef.key (1)
cookie-secret
string
controllers.code-server.containers.oauth2-proxy.env.OAUTH2_PROXY_COOKIE_SECRET.valueFrom.secretKeyRef.name (1)
code-server-secret
string
controllers.code-server.containers.oauth2-proxy.image.repository (1)
quay.io/oauth2-proxy/oauth2-proxy
string
controllers.code-server.containers.oauth2-proxy.image.tag (1)
v7.15.3
string
controllers.code-server.containers.oauth2-proxy.probes.liveness.custom (1)
true
boolean
controllers.code-server.containers.oauth2-proxy.probes.liveness.enabled (1)
true
boolean
controllers.code-server.containers.oauth2-proxy.probes.liveness.spec.httpGet.path (1)
/ping
string
controllers.code-server.containers.oauth2-proxy.probes.liveness.spec.httpGet.port (1)
8443
number
controllers.code-server.containers.oauth2-proxy.probes.liveness.spec.httpGet.scheme (1)
HTTPS
string
controllers.code-server.containers.oauth2-proxy.probes.liveness.spec.initialDelaySeconds (1)
5
number
controllers.code-server.containers.oauth2-proxy.probes.liveness.spec.periodSeconds (1)
30
number
controllers.code-server.containers.oauth2-proxy.probes.readiness.custom (1)
true
boolean
controllers.code-server.containers.oauth2-proxy.probes.readiness.enabled (1)
true
boolean
controllers.code-server.containers.oauth2-proxy.probes.readiness.spec.httpGet.path (1)
/ping
string
controllers.code-server.containers.oauth2-proxy.probes.readiness.spec.httpGet.port (1)
8443
number
controllers.code-server.containers.oauth2-proxy.probes.readiness.spec.httpGet.scheme (1)
HTTPS
string
controllers.code-server.containers.oauth2-proxy.probes.readiness.spec.initialDelaySeconds (1)
5
number
controllers.code-server.containers.oauth2-proxy.probes.readiness.spec.periodSeconds (1)
30
number
controllers.code-server.containers.oauth2-proxy.resources.limits.memory (1)
128Mi
string
controllers.code-server.containers.oauth2-proxy.resources.requests.cpu (1)
10m
string
controllers.code-server.containers.oauth2-proxy.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.code-server.containers.oauth2-proxy.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.code-server.containers.oauth2-proxy.securityContext.readOnlyRootFilesystem (1)
true
boolean
controllers.code-server.containers.ssh.env.PASSWORD_ACCESS (1)
false
string
controllers.code-server.containers.ssh.env.PGID (1)
1000
string
controllers.code-server.containers.ssh.env.PUID (1)
1000
string
controllers.code-server.containers.ssh.env.TZ (1)
America/Chicago
string
controllers.code-server.containers.ssh.env.USER_NAME (1)
ewatkins
string
controllers.code-server.containers.ssh.image.repository (1)
lscr.io/linuxserver/openssh-server
string
controllers.code-server.containers.ssh.image.tag (1)
10.3_p1-r0-ls231
string
controllers.code-server.containers.ssh.resources.limits.memory (1)
256Mi
string
controllers.code-server.containers.ssh.resources.requests.cpu (1)
10m
string
controllers.code-server.containers.ssh.securityContext.runAsGroup (1)
0
number
controllers.code-server.containers.ssh.securityContext.runAsUser (1)
0
number
controllers.code-server.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.code-server.annotations."reloader.stakater.com/search" (1)
true
string
controllers.code-server.initContainers.tools.command[] (1)
- /bin/sh
- -c
- set -eu TALHELPER=v3.1.13 AGE=v1.3.1 FLUX=2.9.2 SOPS=v3.13.2 TASK=v3.52.0 HELMFILE=1.7.0 JQ=jq-1.8.2 KUSTOMIZE=v5.8.1 YQ=v4.53.3 TALOSCTL=v1.13.6 KUBECONFORM=v0.8.0 KUBECTL=v1.36.2 HELM=v3.21.3 BIN=/home/ewatkins/.local/bin MARKER="${BIN}/.toolchain" STAMP="${TALHELPER} ${AGE} ${FLUX} ${SOPS} ${TASK} ${HELMFILE} ${JQ} ${KUSTOMIZE} ${YQ} ${TALOSCTL} ${KUBECONFORM} ${KUBECTL} ${HELM}" # The PVC is provisioned root-owned; code-server runs as uid 1000. # .config is repaired too: an earlier revision mounted a secret # under it, which left it owned by root on the volume. # .linuxbrew-home backs the /home/linuxbrew mount in the app # container; pre-created here so kubelet's subPath handling # doesn't make it root-owned. mkdir -p "${BIN}" /home/ewatkins/.config /home/ewatkins/.linuxbrew-home chown 1000:1000 /home/ewatkins /home/ewatkins/.local /home/ewatkins/.config /home/ewatkins/.linuxbrew-home "${BIN}" # sshd StrictModes rejects a group/world-writable home. This is # also why the pod sets no fsGroup: kubelet's fsGroup pass wants # setgid+group-write on the volume root, never gets it because of # this chmod, and so re-ran its recursive `mode |= 0660` over the # whole PVC on every start — which reset ~/.ssh private keys from # 0600 to 0660 and made ssh reject them. chmod 0755 /home/ewatkins if [ -f "${MARKER}" ] && [ "$(cat "${MARKER}")" = "${STAMP}" ]; then echo "toolchain up to date, skipping install" exit 0 fi apk add --no-cache curl tar >/dev/null cd "${BIN}" # Single binaries curl -fsSL -o sops "https://github.com/getsops/sops/releases/download/${SOPS}/sops-${SOPS}.linux.amd64" curl -fsSL -o jq "https://github.com/jqlang/jq/releases/download/${JQ}/jq-linux-amd64" curl -fsSL -o yq "https://github.com/mikefarah/yq/releases/download/${YQ}/yq_linux_amd64" curl -fsSL -o talosctl "https://github.com/siderolabs/talos/releases/download/${TALOSCTL}/talosctl-linux-amd64" curl -fsSL -o kubectl "https://dl.k8s.io/release/${KUBECTL}/bin/linux/amd64/kubectl" # Tarballs: extract just the binary we want curl -fsSL "https://github.com/budimanjojo/talhelper/releases/download/${TALHELPER}/talhelper_linux_amd64.tar.gz" | tar xz talhelper curl -fsSL "https://github.com/FiloSottile/age/releases/download/${AGE}/age-${AGE}-linux-amd64.tar.gz" | tar xz --strip-components=1 age/age age/age-keygen curl -fsSL "https://github.com/fluxcd/flux2/releases/download/v${FLUX}/flux_${FLUX}_linux_amd64.tar.gz" | tar xz flux curl -fsSL "https://github.com/go-task/task/releases/download/${TASK}/task_linux_amd64.tar.gz" | tar xz task curl -fsSL "https://github.com/helmfile/helmfile/releases/download/v${HELMFILE}/helmfile_${HELMFILE}_linux_amd64.tar.gz" | tar xz helmfile curl -fsSL "https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2F${KUSTOMIZE}/kustomize_${KUSTOMIZE}_linux_amd64.tar.gz" | tar xz kustomize curl -fsSL "https://github.com/yannh/kubeconform/releases/download/${KUBECONFORM}/kubeconform-linux-amd64.tar.gz" | tar xz kubeconform curl -fsSL "https://get.helm.sh/helm-${HELM}-linux-amd64.tar.gz" | tar xz --strip-components=1 linux-amd64/helm chmod 0755 * echo "${STAMP}" > "${MARKER}" chown -R 1000:1000 "${BIN}"
string
controllers.code-server.initContainers.tools.image.repository (1)
docker.io/library/alpine
string
controllers.code-server.initContainers.tools.image.tag (1)
3.24.1
string
controllers.code-server.initContainers.tools.resources.limits.memory (1)
512Mi
string
controllers.code-server.initContainers.tools.resources.requests.cpu (1)
50m
string
controllers.code-server.initContainers.tools.securityContext.runAsGroup (1)
0
number
controllers.code-server.initContainers.tools.securityContext.runAsUser (1)
0
number
controllers.code-server.initContainers.z-git-pull.command[] (1)
- /bin/sh
- -c
- REPO=/home/ewatkins/projects/talos-cluster cd "${REPO}" 2>/dev/null || { echo "no clone at ${REPO}, skipping"; exit 0; } # --autostash so uncommitted work is restored afterwards, --rebase # so local commits replay on top instead of spawning merge commits. timeout 60 git pull --rebase --autostash origin main 2>&1 || { echo "pull failed, leaving the checkout as-is" # A conflicted rebase would otherwise leave the tree mid-rebase. git rebase --abort 2>/dev/null || true } exit 0
string
controllers.code-server.initContainers.z-git-pull.env.HOME (1)
/home/ewatkins
string
controllers.code-server.initContainers.z-git-pull.image.repository (1)
ghcr.io/coder/code-server
string
controllers.code-server.initContainers.z-git-pull.image.tag (1)
4.131.0
string
controllers.code-server.initContainers.z-git-pull.resources.limits.memory (1)
256Mi
string
controllers.code-server.initContainers.z-git-pull.resources.requests.cpu (1)
10m
string
controllers.code-server.pod.securityContext.fsGroup (1)
1003
number
controllers.code-server.pod.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
controllers.code-server.pod.securityContext.runAsGroup (1)
1003
number
controllers.code-server.pod.securityContext.runAsUser (1)
1003
number
controllers.code-server.serviceAccount.name (1)
code-server
string
controllers.code-server.strategy (1)
Recreate
string
controllers.code-server.type (1)
statefulset
string
controllers.app.annotations."reloader.stakater.com/auto" (1)
false
string
controllers.app.annotations."secret.reloader.stakater.com/reload" (1)
code-server-secrets
string
controllers.app.containers.app.args[] (1)
- /home/linuxbrew/.linuxbrew/sbin/sshd -p 2222 || true; /usr/bin/code-server --auth none --disable-telemetry --user-data-dir /home/coder/.vscode --extensions-dir /home/coder/.vscode --bind-addr 0.0.0.0:8080 --port 8080 /home/coder
string
controllers.app.containers.app.command[] (1)
- dumb-init
- /bin/bash
- -c
string
controllers.app.containers.app.env.SOPS_AGE_KEY.valueFrom.secretKeyRef.key (1)
age.agekey
string
controllers.app.containers.app.env.SOPS_AGE_KEY.valueFrom.secretKeyRef.name (1)
code-server-secrets
string
controllers.app.containers.app.env.SSH_AUTH_SOCK (1)

string
controllers.app.containers.app.env.TZ (1)
${CONFIG_TZ}
string
controllers.app.containers.app.image.repository (1)
ghcr.io/coder/code-server
string
controllers.app.containers.app.image.tag (1)
4.131.0@sha256:3623e6362abdec6258472882b06fdeec9d6ce2ad3fda316b3c5d7ed092b89add
string
controllers.app.containers.app.probes.liveness.enabled (1)
true
boolean
controllers.app.containers.app.probes.readiness.enabled (1)
true
boolean
controllers.app.containers.app.resources.limits.cpu (1)
2500m
string
controllers.app.containers.app.resources.limits.memory (1)
4Gi
string
controllers.app.containers.app.resources.requests.cpu (1)
10m
string
controllers.app.containers.app.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.app.containers.app.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.app.containers.app.securityContext.readOnlyRootFilesystem (1)
true
boolean
controllers.app.pod.labels."authentik.home.arpa/oidc" (1)
allow
string
controllers.app.pod.labels."egress.home.arpa/apiserver" (1)
allow
string
controllers.app.pod.labels."egress.home.arpa/cluster" (1)
allow
string
controllers.app.pod.labels."egress.home.arpa/world" (1)
allow
string
controllers.app.pod.labels."ingress.home.arpa/jjgadgets" (1)
allow
string
controllers.app.pod.labels."ingress.home.arpa/nginx-internal" (1)
allow
string
controllers.app.pod.labels."tailscale.com/expose" (1)
true
string
controllers.app.replicas (1)
1
number
controllers.app.serviceAccount.identifier (1)
app
string
controllers.app.type (1)
deployment
string
controllers.main.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.main.containers.main.args[] (1)
- --auth
- none
- --user-data-dir
- /home/coder/.vscode
- --extensions-dir
- /home/coder/.vscode
- --port
- "8080"
- --enable-proposed-api
- google.antigravity
- --enable-proposed-api
- google.antigravity-code-executor
- --proxy-domain
- code.home.${SECRET_DOMAIN}
- /home/coder
string
controllers.main.containers.main.env.DISABLE_TELEMETRY (1)
true
string
controllers.main.containers.main.image.repository (1)
ghcr.io/coder/code-server
string
controllers.main.containers.main.image.tag (1)
4.131.0
string
controllers.main.containers.main.lifecycle.postStart.exec.command[] (1)
- /bin/bash
- -c
- sudo /tmp/setup-tools.sh > /home/coder/setup.log 2>&1
string
controllers.main.containers.main.resources.limits.memory (1)
8G
string
controllers.main.containers.main.resources.requests.cpu (1)
10m
string
controllers.main.containers.main.resources.requests.memory (1)
640M
string
controllers.main.pod.securityContext.fsGroup (1)
1000
number
controllers.main.pod.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
controllers.main.pod.securityContext.runAsGroup (1)
1000
number
controllers.main.pod.securityContext.runAsUser (1)
1000
number
controllers.main.type (1)
statefulset
string
defaultPodOptions.securityContext.runAsGroup (4)
1000
number
defaultPodOptions.securityContext.runAsUser (4)
1000
number
defaultPodOptions.securityContext.fsGroup (3)
1000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (2)
OnRootMismatch
string
defaultPodOptions.securityContext.runAsNonRoot (2)
true
boolean
defaultPodOptions.securityContext.seccompProfile.type (2)
RuntimeDefault
string
defaultPodOptions.automountServiceAccountToken (2)
true
boolean
defaultPodOptions.hostname (2)
${CLUSTER_NAME:=biohazard}-code-server
string
defaultPodOptions.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)
fuckoff.home.arpa/{{ .Release.Name }}
string
defaultPodOptions.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)
DoesNotExist
string
defaultPodOptions.enableServiceLinks (1)
true
boolean
defaultPodOptions.hostAliases[].hostnames[] (1)
- ${APP_DNS_AUTHENTIK:=authentik}
string
defaultPodOptions.hostAliases[].ip (1)
${APP_IP_AUTHENTIK:=127.0.0.1}
string
defaultPodOptions.hostUsers (1)
false
boolean
defaultPodOptions.nodeSelector."kubernetes.io/hostname" (1)
duck
string
persistence.config.existingClaim (4)
code-server-v1
string
persistence.config.globalMounts[].path (3)
/home/coder
/home/coder/.ssh
/nix/var
string
persistence.config.globalMounts[].subPath (1)
data
ssh
nix-var
string
persistence.config.enabled (1)
true
boolean
persistence.brew.advancedMounts.code-server.app[].path (1)
/home/linuxbrew
string
persistence.brew.advancedMounts.code-server.app[].subPath (1)
.linuxbrew-home
string
persistence.brew.existingClaim (1)
code-server-config
string
persistence.data.existingClaim (1)
code-server
string
persistence.data.globalMounts[].path (1)
/home/coder
string
persistence.identity-sudoers.advancedMounts.code-server.app[].path (1)
/etc/sudoers.d/nopasswd
/etc/shadow
string
persistence.identity-sudoers.advancedMounts.code-server.app[].readOnly (1)
true
true
boolean
persistence.identity-sudoers.advancedMounts.code-server.app[].subPath (1)
nopasswd
shadow
string
persistence.identity-sudoers.defaultMode (1)
440
number
persistence.identity-sudoers.name (1)
code-server-identity
string
persistence.identity-sudoers.type (1)
configMap
string
persistence.identity.advancedMounts.code-server.app[].path (1)
/etc/passwd
/etc/group
/etc/profile.d/toolchain.sh
string
persistence.identity.advancedMounts.code-server.app[].readOnly (1)
true
true
true
boolean
persistence.identity.advancedMounts.code-server.app[].subPath (1)
passwd
group
toolchain.sh
string
persistence.identity.advancedMounts.code-server.ssh[].path (1)
/etc/profile.d/toolchain.sh
string
persistence.identity.advancedMounts.code-server.ssh[].readOnly (1)
true
boolean
persistence.identity.advancedMounts.code-server.ssh[].subPath (1)
toolchain.sh
string
persistence.identity.defaultMode (1)
644
number
persistence.identity.name (1)
code-server-identity
string
persistence.identity.type (1)
configMap
string
persistence.minecraftdata.enabled (1)
true
boolean
persistence.minecraftdata.existingClaim (1)
mc-potatov-v1
string
persistence.minecraftdata.globalMounts[].path (1)
/config/minecraft
string
persistence.misc.existingClaim (1)
code-server-misc
string
persistence.misc.globalMounts[].path (1)
/home/coder/ignore
/home/linuxbrew
/nix/store
/home/coder/.cache
/home/coder/.local/share/mise
/home/coder/go
string
persistence.misc.globalMounts[].subPath (1)
ignore
brew
nix
cache
mise
go
string
persistence.secret.advancedMounts.code-server.app[].path (1)
/var/run/secrets/sops/age.key
string
persistence.secret.advancedMounts.code-server.app[].readOnly (1)
true
boolean
persistence.secret.advancedMounts.code-server.app[].subPath (1)
age.key
string
persistence.secret.defaultMode (1)
444
number
persistence.secret.name (1)
code-server-secret
string
persistence.secret.type (1)
secret
string
persistence.secrets.advancedMounts.app.app[].path (1)
/home/coder/.ssh/id_rsa
/home/coder/.ssh/id_rsa.pub
string
persistence.secrets.advancedMounts.app.app[].readOnly (1)
true
true
boolean
persistence.secrets.advancedMounts.app.app[].subPath (1)
ssh-privkey
ssh-pubkey
string
persistence.secrets.defaultMode (1)
600
number
persistence.secrets.name (1)
code-server-secrets
string
persistence.secrets.type (1)
secret
string
persistence.setup-tools.defaultMode (1)
755
number
persistence.setup-tools.globalMounts[].path (1)
/tmp/setup-tools.sh
string
persistence.setup-tools.globalMounts[].readOnly (1)
true
boolean
persistence.setup-tools.globalMounts[].subPath (1)
setup-tools.sh
string
persistence.setup-tools.name (1)
code-server-setup-tools
string
persistence.setup-tools.type (1)
configMap
string
persistence.ssh-config.advancedMounts.code-server.ssh[].path (1)
/config
string
persistence.ssh-config.advancedMounts.code-server.ssh[].subPath (1)
.ssh-server
string
persistence.ssh-config.existingClaim (1)
code-server-config
string
persistence.ssh-init.advancedMounts.code-server.ssh[].path (1)
/custom-cont-init.d/10-home.sh
string
persistence.ssh-init.advancedMounts.code-server.ssh[].readOnly (1)
true
boolean
persistence.ssh-init.advancedMounts.code-server.ssh[].subPath (1)
ssh-home.sh
string
persistence.ssh-init.defaultMode (1)
755
number
persistence.ssh-init.name (1)
code-server-identity
string
persistence.ssh-init.type (1)
configMap
string
persistence.talos-admin.advancedMounts.app.app[].path (1)
/var/run/secrets/talos.dev
/home/coder/.talos
string
persistence.talos-admin.advancedMounts.app.app[].readOnly (1)
true
true
boolean
persistence.talos-admin.defaultMode (1)
400
number
persistence.talos-admin.name (1)
talos
string
persistence.talos-admin.type (1)
secret
string
persistence.tls.advancedMounts.code-server.oauth2-proxy[].path (1)
/tls
string
persistence.tls.advancedMounts.code-server.oauth2-proxy[].readOnly (1)
true
boolean
persistence.tls.name (1)
code-server-tls
string
persistence.tls.type (1)
secret
string
persistence.tmp.globalMounts[].path (1)
/tmp
string
persistence.tmp.globalMounts[].readOnly (1)
false
boolean
persistence.tmp.globalMounts[].subPath (1)
tmp
string
persistence.tmp.medium (1)
Memory
string
persistence.tmp.type (1)
emptyDir
string
persistence.tmpfs.globalMounts[].path (1)
/tmp
string
persistence.tmpfs.globalMounts[].subPath (1)
tmp
string
persistence.tmpfs.type (1)
emptyDir
string
service.app.ports.http.port (4)
8080
number
service.app.ports.http.appProtocol (1)
http
string
service.app.ports.http.enabled (1)
true
boolean
service.app.ports.http.protocol (1)
HTTP
string
service.app.ports.http.targetPort (1)
8080
number
service.app.ports.https.port (1)
443
number
service.app.ports.https.targetPort (1)
8443
number
service.app.ports.hugo.port (1)
1313
number
service.app.ports.ssh.port (1)
22
number
service.app.ports.ssh.targetPort (1)
2222
number
service.app.ports.test.port (1)
8081
number
service.app.controller (3)
code-server
string
service.app.forceRename (2)
code-server
string
service.app.annotations."external-dns.alpha.kubernetes.io/hostname" (1)
code.ewatkins.dev
string
service.app.annotations."io.cilium/lb-ipam-ips" (1)
${CODE_SERVER}
string
service.app.externalTrafficPolicy (1)
Cluster
string
service.app.type (1)
LoadBalancer
string
service.main.controller (1)
main
string
service.main.ports.http.port (1)
8080
number
service.ssh.annotations."coredns.io/hostname" (1)
vs-ssh.${DNS_SHORT:=internal}
string
service.ssh.annotations."io.cilium/lb-ipam-ips" (1)
${APP_IP_CODE_SERVER_SSH:=127.0.0.1}
string
service.ssh.annotations."tailscale.com/expose" (1)
true
string
service.ssh.annotations."tailscale.com/hostname" (1)
vs-ssh
string
service.ssh.controller (1)
app
string
service.ssh.labels."io.cilium/l2" (1)
true
string
service.ssh.ports.http.port (1)
22
number
service.ssh.ports.http.protocol (1)
TCP
string
service.ssh.ports.http.targetPort (1)
2222
number
service.ssh.ports.ssh2.port (1)
22222
number
service.ssh.primary (1)
false
boolean
service.ssh.type (1)
LoadBalancer
string
route.app.hostnames[] (2)
- vs.${DNS_SHORT:=internal}
string
route.app.parentRefs[].name (2)
envoy-internal
string
route.app.parentRefs[].namespace (2)
ingress
string
route.app.parentRefs[].sectionName (2)
internal
string
route.app.rules[].backendRefs[].identifier (2)
app
string
route.app.rules[].backendRefs[].port (2)
http
string
route.app.rules[].timeouts.backendRequest (1)
0s
string
route.app.rules[].timeouts.request (1)
0s
string
route.hugo.hostnames[] (1)
- hugo.${DNS_SHORT:=internal}
string
route.hugo.parentRefs[].name (1)
envoy-internal
string
route.hugo.parentRefs[].namespace (1)
ingress
string
route.hugo.parentRefs[].sectionName (1)
internal
string
route.hugo.rules[].backendRefs[].identifier (1)
app
string
route.hugo.rules[].backendRefs[].port (1)
hugo
string
route.main.annotations."gatus.io/enabled" (1)
true
string
route.main.enabled (1)
true
boolean
route.main.hostnames[] (1)
- code.home.${SECRET_DOMAIN}
string
route.main.parentRefs[].name (1)
internal-gateway
string
route.main.parentRefs[].namespace (1)
networking
string
route.main.rules[].backendRefs[].identifier (1)
main
string
route.main.rules[].backendRefs[].port (1)
8080
number
route.main.rules[].filters[].extensionRef.group (1)
traefik.io
string
route.main.rules[].filters[].extensionRef.kind (1)
Middleware
string
route.main.rules[].filters[].extensionRef.name (1)
rfc1918-ips
string
route.main.rules[].filters[].type (1)
ExtensionRef
string
route.test.hostnames[] (1)
- vs-test.${DNS_SHORT:=internal}
string
route.test.parentRefs[].name (1)
envoy-internal
string
route.test.parentRefs[].namespace (1)
ingress
string
route.test.parentRefs[].sectionName (1)
internal
string
route.test.rules[].backendRefs[].identifier (1)
app
string
route.test.rules[].backendRefs[].port (1)
test
string
ingress.code-server.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
ingress.code-server.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)
websecure
string
ingress.code-server.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)
networking-traefik-forward-auth@kubernetescrd
string
ingress.code-server.annotations."traefik.ingress.kubernetes.io/router.tls" (1)
true
string
ingress.code-server.className (1)
traefik
string
ingress.code-server.hosts[].host (1)
code-server.${SECRET_DOMAIN}
string
ingress.code-server.hosts[].paths[].path (1)
/
string
ingress.code-server.hosts[].paths[].pathType (1)
Prefix
string
ingress.code-server.hosts[].paths[].service.identifier (1)
app
string
ingress.code-server.hosts[].paths[].service.port (1)
http
string
ingress.code-server.tls[].hosts[] (1)
- code-server.${SECRET_DOMAIN}
string
ingress.code-server.tls[].secretName (1)
code-server-tls
string
rbac.bindings.app.roleRef.kind (1)
ClusterRole
string
rbac.bindings.app.roleRef.name (1)
cluster-admin
string
rbac.bindings.app.subjects[].identifier (1)
app
string
rbac.bindings.app.subjects[].kind (1)
ServiceAccount
string
rbac.bindings.app.type (1)
ClusterRoleBinding
string