- Notifications
You must be signed in to change notification settings - Fork927
chore(examples): update kubernetes devcontainer template with envbuilder provider#14267
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.
Already on GitHub?Sign in to your account
Uh oh!
There was an error while loading.Please reload this page.
Changes fromall commits
File filter
Filter by extension
Conversations
Uh oh!
There was an error while loading.Please reload this page.
Jump to
Uh oh!
There was an error while loading.Please reload this page.
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -7,6 +7,9 @@ terraform { | ||
| kubernetes = { | ||
| source = "hashicorp/kubernetes" | ||
| } | ||
| envbuilder = { | ||
| source = "coder/envbuilder" | ||
| } | ||
| } | ||
| } | ||
| @@ -15,6 +18,7 @@ provider "kubernetes" { | ||
| # Authenticate via ~/.kube/config or a Coder-specific ServiceAccount, depending on admin preferences | ||
| config_path = var.use_kubeconfig == true ? "~/.kube/config" : null | ||
| } | ||
| provider "envbuilder" {} | ||
| data "coder_provisioner" "me" {} | ||
| data "coder_workspace" "me" {} | ||
| @@ -43,10 +47,15 @@ variable "namespace" { | ||
| variable "cache_repo" { | ||
| default = "" | ||
| description = "Use a container registry as a cache to speed up builds." | ||
| type = string | ||
| } | ||
| variable "insecure_cache_repo" { | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others.Learn more. Nice solution 👍🏻 | ||
| default = false | ||
| description = "Enable this option if your cache registry does not serve HTTPS." | ||
| type = bool | ||
| } | ||
| data "coder_parameter" "cpu" { | ||
| type = "number" | ||
| name = "cpu" | ||
| @@ -139,20 +148,45 @@ data "kubernetes_secret" "cache_repo_dockerconfig_secret" { | ||
| } | ||
| locals { | ||
| deployment_name = "coder-${lower(data.coder_workspace.me.id)}" | ||
| devcontainer_builder_image = data.coder_parameter.devcontainer_builder.value | ||
| git_author_name = coalesce(data.coder_workspace_owner.me.full_name, data.coder_workspace_owner.me.name) | ||
| git_author_email = data.coder_workspace_owner.me.email | ||
| repo_url = data.coder_parameter.repo.value | ||
| # The envbuilder provider requires a key-value map of environment variables. | ||
| envbuilder_env = { | ||
| "CODER_AGENT_TOKEN" : coder_agent.main.token, | ||
| # Use the docker gateway if the access URL is 127.0.0.1 | ||
| "CODER_AGENT_URL" : replace(data.coder_workspace.me.access_url, "/localhost|127\\.0\\.0\\.1/", "host.docker.internal"), | ||
| "ENVBUILDER_GIT_URL" : local.repo_url, | ||
| # Use the docker gateway if the access URL is 127.0.0.1 | ||
| "ENVBUILDER_INIT_SCRIPT" : replace(coder_agent.main.init_script, "/localhost|127\\.0\\.0\\.1/", "host.docker.internal"), | ||
| "ENVBUILDER_FALLBACK_IMAGE" : data.coder_parameter.fallback_image.value, | ||
| "ENVBUILDER_CACHE_REPO" : var.cache_repo, | ||
| "ENVBUILDER_DOCKER_CONFIG_BASE64" : try(data.kubernetes_secret.cache_repo_dockerconfig_secret[0].data[".dockerconfigjson"], ""), | ||
| "ENVBUILDER_PUSH_IMAGE" : var.cache_repo == "" ? "" : "true", | ||
| "ENVBUILDER_INSECURE" : "${var.insecure_cache_repo}", | ||
| } | ||
| } | ||
| # Check for the presence of a prebuilt image in the cache repo | ||
| # that we can use instead. | ||
| resource "envbuilder_cached_image" "cached" { | ||
| count = var.cache_repo == "" ? 0 : data.coder_workspace.me.start_count | ||
| builder_image = local.devcontainer_builder_image | ||
| git_url = local.repo_url | ||
| cache_repo = var.cache_repo | ||
| extra_env = local.envbuilder_env | ||
| insecure = var.insecure_cache_repo | ||
| } | ||
| resource "kubernetes_persistent_volume_claim" "workspaces" { | ||
| metadata { | ||
| name = "coder-${lower(data.coder_workspace.me.id)}-workspaces" | ||
| namespace = var.namespace | ||
| labels = { | ||
| "app.kubernetes.io/name" = "coder-${lower(data.coder_workspace.me.id)}-workspaces" | ||
| "app.kubernetes.io/instance" = "coder-${lower(data.coder_workspace.me.id)}-workspaces" | ||
| "app.kubernetes.io/part-of" = "coder" | ||
| //Coder-specific labels. | ||
| "com.coder.resource" = "true" | ||
| @@ -173,13 +207,14 @@ resource "kubernetes_persistent_volume_claim" "home" { | ||
| storage = "${data.coder_parameter.workspaces_volume_size.value}Gi" | ||
| } | ||
| } | ||
| # storage_class_name = "local-path" # Configure the StorageClass to use here, if required. | ||
| } | ||
| } | ||
| resource "kubernetes_deployment" "main" { | ||
| count = data.coder_workspace.me.start_count | ||
| depends_on = [ | ||
| kubernetes_persistent_volume_claim.workspaces | ||
| ] | ||
| wait_for_rollout = false | ||
| metadata { | ||
| @@ -222,7 +257,7 @@ resource "kubernetes_deployment" "main" { | ||
| container { | ||
| name = "dev" | ||
| image =var.cache_repo == "" ?local.devcontainer_builder_image : envbuilder_cached_image.cached.0.image | ||
| image_pull_policy = "Always" | ||
| security_context {} | ||
| env { | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others.Learn more. review: leaving as-is untilcoder/terraform-provider-envbuilder#31 is resolved. There may be some additional Terraform jiggery pokery requried to convert There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others.Learn more. A for-loop would be nice here to set all the envs, wdyt? Right now it can come from env {for_each=locals.envbuilder_envname=each.keyvalue=each.value} Not sure if There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others.Learn more. Yeah, but then that needs to be referenced in the There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others.Learn more. Possibly, my tf foo is not strong enough 😄 There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others.Learn more. I'll address this in a follow-up. The current way the envbuilder provider outputs the computed env isn't really conducive to this scenario right now anyway. | ||
| @@ -249,6 +284,14 @@ resource "kubernetes_deployment" "main" { | ||
| name = "ENVBUILDER_CACHE_REPO" | ||
| value = var.cache_repo | ||
| } | ||
| env { | ||
| name = "ENVBUILDER_PUSH_IMAGE" | ||
| value = var.cache_repo == "" ? "" : "true" | ||
| } | ||
| env { | ||
| name = "ENVBUILDER_INSECURE" | ||
| value = var.insecure_cache_repo | ||
| } | ||
| env { | ||
| name = "ENVBUILDER_DOCKER_CONFIG_BASE64" | ||
| value = try(data.kubernetes_secret.cache_repo_dockerconfig_secret[0].data[".dockerconfigjson"], "") | ||
| @@ -271,16 +314,16 @@ resource "kubernetes_deployment" "main" { | ||
| } | ||
| } | ||
| volume_mount { | ||
| mount_path = "/workspaces" | ||
| name = "workspaces" | ||
| read_only = false | ||
| } | ||
| } | ||
| volume { | ||
| name = "workspaces" | ||
| persistent_volume_claim { | ||
| claim_name = kubernetes_persistent_volume_claim.workspaces.metadata.0.name | ||
| read_only = false | ||
| } | ||
| } | ||
| @@ -357,9 +400,9 @@ resource "coder_agent" "main" { | ||
| } | ||
| metadata { | ||
| display_name = "Workspaces Disk" | ||
| key = "3_workspaces_disk" | ||
| script = "coder stat disk --path/workspaces" | ||
| interval = 60 | ||
| timeout = 1 | ||
| } | ||
| @@ -417,3 +460,20 @@ resource "coder_app" "code-server" { | ||
| threshold = 6 | ||
| } | ||
| } | ||
| resource "coder_metadata" "container_info" { | ||
| count = data.coder_workspace.me.start_count | ||
| resource_id = coder_agent.main.id | ||
| item { | ||
| key = "workspace image" | ||
| value = var.cache_repo == "" ? local.devcontainer_builder_image : envbuilder_cached_image.cached.0.image | ||
| } | ||
| item { | ||
| key = "git url" | ||
| value = local.repo_url | ||
| } | ||
| item { | ||
| key = "cache repo" | ||
| value = var.cache_repo == "" ? "not enabled" : var.cache_repo | ||
| } | ||
| } | ||
Uh oh!
There was an error while loading.Please reload this page.