mirror of
https://github.com/coder/coder.git
synced 2026-06-02 20:48:20 +00:00
2ba4a62a0d
* feat: HA tailnet coordinator * fixup! feat: HA tailnet coordinator * fixup! feat: HA tailnet coordinator * remove printlns * close all connections on coordinator * impelement high availability feature * fixup! impelement high availability feature * fixup! impelement high availability feature * fixup! impelement high availability feature * fixup! impelement high availability feature * Add replicas * Add DERP meshing to arbitrary addresses * Move packages to highavailability folder * Move coordinator to high availability package * Add flags for HA * Rename to replicasync * Denest packages for replicas * Add test for multiple replicas * Fix coordination test * Add HA to the helm chart * Rename function pointer * Add warnings for HA * Add the ability to block endpoints * Add flag to disable P2P connections * Wow, I made the tests pass * Add replicas endpoint * Ensure close kills replica * Update sql * Add database latency to high availability * Pipe TLS to DERP mesh * Fix DERP mesh with TLS * Add tests for TLS * Fix replica sync TLS * Fix RootCA for replica meshing * Remove ID from replicasync * Fix getting certificates for meshing * Remove excessive locking * Fix linting * Store mesh key in the database * Fix replica key for tests * Fix types gen * Fix unlocking unlocked * Fix race in tests * Update enterprise/derpmesh/derpmesh.go Co-authored-by: Colin Adler <colin1adler@gmail.com> * Rename to syncReplicas * Reuse http client * Delete old replicas on a CRON * Fix race condition in connection tests * Fix linting * Fix nil type * Move pubsub to in-memory for twenty test * Add comment for configuration tweaking * Fix leak with transport * Fix close leak in derpmesh * Fix race when creating server * Remove handler update * Skip test on Windows * Fix DERP mesh test * Wrap HTTP handler replacement in mutex * Fix error message for relay * Fix API handler for normal tests * Fix speedtest * Fix replica resend * Fix derpmesh send * Ping async * Increase wait time of template version jobd * Fix race when closing replica sync * Add name to client * Log the derpmap being used * Don't connect if DERP is empty * Improve agent coordinator logging * Fix lock in coordinator * Fix relay addr * Fix race when updating durations * Fix client publish race * Run pubsub loop in a queue * Store agent nodes in order * Fix coordinator locking * Check for closed pipe Co-authored-by: Colin Adler <colin1adler@gmail.com>
120 lines
5.4 KiB
YAML
120 lines
5.4 KiB
YAML
# coder -- Primary configuration for `coder server`.
|
|
coder:
|
|
# coder.replicaCount -- The number of Kubernetes deployment replicas.
|
|
# This should only be increased if High Availability is enabled.
|
|
# This is an Enterprise feature. Contact sales@coder.com.
|
|
replicaCount: 1
|
|
|
|
# coder.image -- The image to use for Coder.
|
|
image:
|
|
# coder.image.repo -- The repository of the image.
|
|
repo: "ghcr.io/coder/coder"
|
|
# coder.image.tag -- The tag of the image, defaults to {{.Chart.AppVersion}}
|
|
# if not set. If you're using the chart directly from git, the default
|
|
# app version will not work and you'll need to set this value. The helm
|
|
# chart helpfully fails quickly in this case.
|
|
tag: ""
|
|
# coder.image.pullPolicy -- The pull policy to use for the image. See:
|
|
# https://kubernetes.io/docs/concepts/containers/images/#image-pull-policy
|
|
pullPolicy: IfNotPresent
|
|
|
|
# coder.annotations -- The Deployment annotations. See:
|
|
# https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
|
|
annotations: {}
|
|
|
|
# coder.serviceAccount -- Configuration for the automatically created service
|
|
# account. Creation of the service account cannot be disabled.
|
|
serviceAccount:
|
|
# coder.serviceAccount.workspacePerms -- Whether or not to grant the coder
|
|
# service account permissions to manage workspaces. This includes
|
|
# permission to manage pods and persistent volume claims in the deployment
|
|
# namespace.
|
|
#
|
|
# It is recommended to keep this on if you are using Kubernetes templates
|
|
# within Coder.
|
|
workspacePerms: true
|
|
|
|
# coder.env -- The environment variables to set for Coder. These can be used
|
|
# to configure all aspects of `coder server`. Please see `coder server --help`
|
|
# for information about what environment variables can be set.
|
|
# Note: The following environment variables are set by default and cannot be
|
|
# overridden:
|
|
# - CODER_ADDRESS: set to 0.0.0.0:80 and cannot be changed.
|
|
# - CODER_TLS_ENABLE: set if tls.secretName is not empty.
|
|
# - CODER_TLS_CERT_FILE: set if tls.secretName is not empty.
|
|
# - CODER_TLS_KEY_FILE: set if tls.secretName is not empty.
|
|
env: []
|
|
|
|
# coder.tls -- The TLS configuration for Coder.
|
|
tls:
|
|
# coder.tls.secretNames -- A list of TLS server certificate secrets to mount
|
|
# into the Coder pod. The secrets should exist in the same namespace as the
|
|
# Helm deployment and should be of type "kubernetes.io/tls". The secrets
|
|
# will be automatically mounted into the pod if specified, and the correct
|
|
# "CODER_TLS_*" environment variables will be set for you.
|
|
secretNames: []
|
|
# coder.tls.secretName -- Deprecated. Use `coder.tls.secretNames` instead.
|
|
# This will be removed in a future release.
|
|
# secretName: ""
|
|
|
|
# coder.resources -- The resources to request for Coder. These are optional
|
|
# and are not set by default.
|
|
resources:
|
|
{}
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
|
|
# coder.service -- The Service object to expose for Coder.
|
|
service:
|
|
# coder.service.enable -- Whether to create the Service object.
|
|
enable: true
|
|
# coder.service.type -- The type of service to expose. See:
|
|
# https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types
|
|
type: LoadBalancer
|
|
# coder.service.externalTrafficPolicy -- The external traffic policy to use.
|
|
# You may need to change this to "Local" to preserve the source IP address
|
|
# in some situations.
|
|
# https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
|
|
externalTrafficPolicy: Cluster
|
|
# coder.service.loadBalancerIP -- The IP address of the LoadBalancer. If not
|
|
# specified, a new IP will be generated each time the load balancer is
|
|
# recreated. It is recommended to manually create a static IP address in
|
|
# your cloud and specify it here in production to avoid accidental IP
|
|
# address changes.
|
|
loadBalancerIP: ""
|
|
# coder.service.annotations -- The service annotations. See:
|
|
# https://kubernetes.io/docs/concepts/services-networking/service/#internal-load-balancer
|
|
annotations: {}
|
|
|
|
# coder.ingress -- The Ingress object to expose for Coder.
|
|
ingress:
|
|
# coder.ingress.enable -- Whether to create the Ingress object. If using an
|
|
# Ingress, we recommend not specifying coder.tls.secretNames as the Ingress
|
|
# will handle TLS termination.
|
|
enable: false
|
|
# coder.ingress.className -- The name of the Ingress class to use.
|
|
className: ""
|
|
# coder.ingress.host -- The hostname to match on.
|
|
host: ""
|
|
# coder.ingress.wildcardHost -- The wildcard hostname to match on. Should be
|
|
# in the form "*.example.com" or "*-suffix.example.com". If you are using a
|
|
# suffix after the wildcard, the suffix will be stripped from the created
|
|
# ingress to ensure that it is a legal ingress host. Optional if not using
|
|
# applications over subdomains.
|
|
wildcardHost: ""
|
|
# coder.ingress.annotations -- The ingress annotations.
|
|
annotations: {}
|
|
# coder.ingress.tls -- The TLS configuration to use for the Ingress.
|
|
tls:
|
|
# coder.ingress.tls.enable -- Whether to enable TLS on the Ingress.
|
|
enable: false
|
|
# coder.ingress.tls.secretName -- The name of the TLS secret to use.
|
|
secretName: ""
|
|
# coder.ingress.tls.wildcardSecretName -- The name of the TLS secret to
|
|
# use for the wildcard host.
|
|
wildcardSecretName: ""
|