add: persistence & coder images

ericpaulsen · ericpaulsen · commit fd7d99810d65 · 2022-08-21T19:12:50.000-05:00
diff --git a/examples/templates/kubernetes-multi-service/README.md b/examples/templates/kubernetes-multi-service/README.md
@@ -72,3 +72,7 @@ roleRef:
 
 Then start the Coder host with `serviceAccountName: coder` in the pod spec.
 
+## Persistence
+
+Each container in this Kubernetes pod example will have their `/home/coder` directory
+persisted via the attached PersistentVolumeClaim.
diff --git a/examples/templates/kubernetes-multi-service/main.tf b/examples/templates/kubernetes-multi-service/main.tf
@@ -32,6 +32,12 @@ variable "workspaces_namespace" {
   default     = "coder-workspaces"
 }
 
+variable "disk_size" {
+  type = number
+  description = "Disk size (__ GB)"
+  default     = 10
+}
+
 provider "kubernetes" {
   # Authenticate via ~/.kube/config or a Coder-specific ServiceAccount, depending on admin preferences
   config_path = var.use_kubeconfig == true ? "~/.kube/config" : null
@@ -63,7 +69,7 @@ resource "kubernetes_pod" "main" {
   spec {
     container {
       name    = "go"
-      image   = "mcr.microsoft.com/vscode/devcontainers/go:1"
+      image   = "codercom/enterprise-golang:ubuntu"
       command = ["sh", "-c", coder_agent.go.init_script]
       security_context {
         run_as_user = "1000"
@@ -72,10 +78,20 @@ resource "kubernetes_pod" "main" {
         name  = "CODER_AGENT_TOKEN"
         value = coder_agent.go.token
       }
+      volume_mount {
+        mount_path = "/home/coder"
+        name       = "go-home-directory"
+      }
+    }
+    volume {
+      name = "go-home-directory"
+      persistent_volume_claim {
+        claim_name = kubernetes_persistent_volume_claim.go-home-directory.metadata.0.name
+      }
     }
     container {
       name    = "java"
-      image   = "mcr.microsoft.com/vscode/devcontainers/java"
+      image   = "codercom/enterprise-java:ubuntu"
       command = ["sh", "-c", coder_agent.java.init_script]
       security_context {
         run_as_user = "1000"
@@ -84,10 +100,20 @@ resource "kubernetes_pod" "main" {
         name  = "CODER_AGENT_TOKEN"
         value = coder_agent.java.token
       }
+      volume_mount {
+        mount_path = "/home/coder"
+        name       = "java-home-directory"
+      }
+    }
+    volume {
+      name = "java-home-directory"
+      persistent_volume_claim {
+        claim_name = kubernetes_persistent_volume_claim.java-home-directory.metadata.0.name
+      }
     }
     container {
       name    = "ubuntu"
-      image   = "mcr.microsoft.com/vscode/devcontainers/base:ubuntu"
+      image   = "codercom/enterprise-base:ubuntu"
       command = ["sh", "-c", coder_agent.ubuntu.init_script]
       security_context {
         run_as_user = "1000"
@@ -96,6 +122,62 @@ resource "kubernetes_pod" "main" {
         name  = "CODER_AGENT_TOKEN"
         value = coder_agent.ubuntu.token
       }
+      volume_mount {
+        mount_path = "/home/coder"
+        name       = "ubuntu-home-directory"
+      }
+    }
+    volume {
+      name = "ubuntu-home-directory"
+      persistent_volume_claim {
+        claim_name = kubernetes_persistent_volume_claim.ubuntu-home-directory.metadata.0.name
+      }
+    }
+
+  }
+}
+
+resource "kubernetes_persistent_volume_claim" "go-home-directory" {
+  metadata {
+    name      = "home-coder-go-${data.coder_workspace.me.owner}-${data.coder_workspace.me.name}"
+    namespace = var.workspaces_namespace
+  }
+  spec {
+    access_modes = ["ReadWriteOnce"]
+    resources {
+      requests = {
+        storage = "${var.disk_size}Gi"
+      }
+    }
+  }
+}
+
+resource "kubernetes_persistent_volume_claim" "java-home-directory" {
+  metadata {
+    name      = "home-coder-java-${data.coder_workspace.me.owner}-${data.coder_workspace.me.name}"
+    namespace = var.workspaces_namespace
+  }
+  spec {
+    access_modes = ["ReadWriteOnce"]
+    resources {
+      requests = {
+        storage = "${var.disk_size}Gi"
+      }
+    }
+  }
+}
+
+resource "kubernetes_persistent_volume_claim" "ubuntu-home-directory" {
+  metadata {
+    name      = "home-coder-ubuntu-${data.coder_workspace.me.owner}-${data.coder_workspace.me.name}"
+    namespace = var.workspaces_namespace
+  }
+  spec {
+    access_modes = ["ReadWriteOnce"]
+    resources {
+      requests = {
+        storage = "${var.disk_size}Gi"
+      }
     }
   }
 }
