Terraform template for dynamically provisioned XFCE desktops (browser-accessible via KasmVNC).
Each workspace spawns a K8s Deployment in the coder namespace with a per-user ceph-block PVC for `/home/coder` (persists across stop/start, deleted on workspace destroy).
Base image `codercom/enterprise-base:ubuntu`; desktop wired via `registry.coder.com/modules/kasmvnc/coder`.
Params: `cpu`, `memory`, `home_size`.
Not applied by Flux — the file is checked in at `kubernetes/apps/coder/templates/desktop/main.tf` for `coder templates push` use.
Test plan
From a machine with Coder CLI + admin session: `coder templates push desktop -d kubernetes/apps/coder/templates/desktop`
Create a workspace from the template and confirm XFCE renders in-browser
## Summary
- Terraform template for dynamically provisioned XFCE desktops (browser-accessible via KasmVNC).
- Each workspace spawns a K8s Deployment in the coder namespace with a per-user ceph-block PVC for \`/home/coder\` (persists across stop/start, deleted on workspace destroy).
- Base image \`codercom/enterprise-base:ubuntu\`; desktop wired via \`registry.coder.com/modules/kasmvnc/coder\`.
- Params: \`cpu\`, \`memory\`, \`home_size\`.
- Not applied by Flux — the file is checked in at \`kubernetes/apps/coder/templates/desktop/main.tf\` for \`coder templates push\` use.
## Test plan
- [ ] From a machine with Coder CLI + admin session: \`coder templates push desktop -d kubernetes/apps/coder/templates/desktop\`
- [ ] Create a workspace from the template and confirm XFCE renders in-browser
Terraform template for dynamically provisioned browser-accessible
XFCE desktops. Each workspace spawns a K8s Deployment in the coder
namespace with a per-user ceph-block PVC for /home/coder that
survives stop/start but is destroyed with the workspace.
Not applied by Flux — push via `coder templates push desktop -d
kubernetes/apps/coder/templates/desktop` once the control plane is
reachable and an admin token exists.
- Base image: codercom/enterprise-base:ubuntu (agent preinstalled)
- Desktop: KasmVNC + XFCE via registry.coder.com/modules/kasmvnc
- Params: cpu (1/2/4/8), memory (2/4/8/16 GiB), home_size (5-200 GiB)
- Non-root (uid 1000), seccomp RuntimeDefault, all caps dropped
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
Test plan