feat(coder): add Coder control plane with Authentik OIDC #1

2026-04-24T15:39:46Z

k.renner commented

2026-04-24 15:39:46 +00:00

Summary

Replaces EOL Kasm VM 124 with a K8s-native platform for dynamically provisioned desktop environments.
HelmRelease coder (chart >=2.32.0 from helm.coder.com/v2) with CNPG coder-pg as external DB, SOPS-encrypted Authentik OIDC credentials, ingress at coder.renner.uno behind letsencrypt-staging.
Kasm was ruled out — its Helm chart is Technical Preview and ships without an agent, Proxmox is being decommissioned, and Talos does not run DinD.

Test plan

Flux reconciles coder Kustomization without errors
coder-pg CNPG Cluster reaches 2/2 ready
coder pod starts, /healthz returns 200
coder.renner.uno TLS cert issues (letsencrypt-staging)
OIDC login flow completes against Authentik; first login grants admin
Post-merge: push a desktop workspace template and provision a test workspace

🤖 Generated with Claude Code

## Summary - Replaces EOL Kasm VM 124 with a K8s-native platform for dynamically provisioned desktop environments. - HelmRelease `coder` (chart `>=2.32.0` from helm.coder.com/v2) with CNPG `coder-pg` as external DB, SOPS-encrypted Authentik OIDC credentials, ingress at `coder.renner.uno` behind `letsencrypt-staging`. - Kasm was ruled out — its Helm chart is Technical Preview and ships without an agent, Proxmox is being decommissioned, and Talos does not run DinD. ## Test plan - [ ] Flux reconciles `coder` Kustomization without errors - [ ] `coder-pg` CNPG Cluster reaches 2/2 ready - [ ] `coder` pod starts, `/healthz` returns 200 - [ ] `coder.renner.uno` TLS cert issues (letsencrypt-staging) - [ ] OIDC login flow completes against Authentik; first login grants admin - [ ] Post-merge: push a desktop workspace template and provision a test workspace 🤖 Generated with [Claude Code](https://claude.com/claude-code)

k.renner added 1 commit 2026-04-24 15:39:47 +00:00

feat(coder): add Coder control plane with Authentik OIDC 0e44b32d4a

Replaces EOL Kasm VM 124 with a K8s-native platform for dynamically
provisioned desktop environments. Kasm was ruled out — its Helm chart
is Technical Preview and does not include the agent, Proxmox is being
decommissioned, and Talos refuses DinD.

HelmRelease `coder` (chart >=2.32.0 from helm.coder.com/v2), CNPG
Cluster `coder-pg` (2 instances, ceph-block 10Gi) as external DB,
SOPS-encrypted Authentik OIDC credentials, ingress at coder.renner.uno
behind letsencrypt-staging. Workspace templates follow separately.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

k.renner merged commit fc4573249b into master

2026-04-24 15:39:54 +00:00

k.renner referenced this issue from a commit

2026-04-24 15:39:55 +00:00

Merge pull request 'feat(coder): add Coder control plane with Authentik OIDC' (#1) from coder-migration into master

k.renner referenced this issue from a commit

2026-06-25 09:03:04 +00:00

authentik: roll server + ldap-outpost to 2026.5.3, pin chart to match

k.renner referenced this pull request

2026-06-25 09:05:19 +00:00

authentik: roll to 2026.5.3 (server + ldap-outpost + chart pin) #21

k.renner referenced this issue from a commit