Terraform template for dynamically provisioned browser-accessible
XFCE desktops. Each workspace spawns a K8s Deployment in the coder
namespace with a per-user ceph-block PVC for /home/coder that
survives stop/start but is destroyed with the workspace.
Not applied by Flux — push via `coder templates push desktop -d
kubernetes/apps/coder/templates/desktop` once the control plane is
reachable and an admin token exists.
- Base image: codercom/enterprise-base:ubuntu (agent preinstalled)
- Desktop: KasmVNC + XFCE via registry.coder.com/modules/kasmvnc
- Params: cpu (1/2/4/8), memory (2/4/8/16 GiB), home_size (5-200 GiB)
- Non-root (uid 1000), seccomp RuntimeDefault, all caps dropped
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
k.rennerandClaude Opus 4.7