code-server
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
1
# Default values for code-server.
2
# This is a YAML-formatted file.
3
# Declare variables to be passed into your templates.
4
5
replicaCount: 1
6
image:
7
repository: cgr.dev/chainguard-private/code-server
8
tag: latest@sha256:4eb4cede4795e0c6b1fc46b5129bcedb0f6caf9ec2fa2219e60907cebb8ec025
9
pullPolicy: Always
10
# Specifies one or more secrets to be used when pulling images from a
11
# private container repository
12
# https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry
13
imagePullSecrets: []
14
# - name: registry-creds
15
16
nameOverride: ""
17
fullnameOverride: ""
18
hostnameOverride: ""
19
# The existing secret to use for code-server authentication in the frontend. the password is stored in the secret under the key `password`
20
# existingSecret: ""
21
serviceAccount:
22
# Specifies whether a service account should be created
23
create: true
24
# Annotations to add to the service account
25
annotations: {}
26
# The name of the service account to use.
27
# If not set and create is true, a name is generated using the fullname template
28
name: ""
29
# Specifies annotations for deployment
30
annotations: {}
31
podAnnotations: {}
32
podSecurityContext: {}
33
# fsGroup: 2000
34
35
priorityClassName: ""
36
service:
37
type: ClusterIP
38
port: 8080
39
ingress:
40
enabled: false
41
#annotations:
42
# kubernetes.io/tls-acme: "true"
43
#hosts:
44
# - host: code-server.example.loc
45
# paths:
46
# - /
47
ingressClassName: ""
48
#tls:
49
# - secretName: code-server
50
# hosts:
51
# - code-server.example.loc
52
# Optional additional arguments
53
extraArgs: []
54
# These are the arguments normally passed to code-server; run
55
# code-server --help for a list of available options.
56
#
57
# Each argument and parameter must have its own entry; if you use
58
# --param value on the command line, then enter it here as:
59
#
60
# - --param
61
# - value
62
#
63
# If you receive an error like "Unknown option --param value", it may be
64
# because both the parameter and value are specified as a single argument,
65
# rather than two separate arguments (e.g. "- --param value" on a line).
66
67
# Optional additional environment variables
68
extraVars: []
69
# - name: DISABLE_TELEMETRY
70
# value: "true"
71
# if dind is desired:
72
# - name: DOCKER_HOST
73
# value: "tcp://localhost:2376"
74
75
##
76
## Init containers parameters:
77
## volumePermissions: Change the owner of the persist volume mountpoint to RunAsUser:fsGroup
78
##
79
volumePermissions:
80
enabled: true
81
securityContext:
82
runAsUser: 0
83
image: cgr.dev/chainguard-private/busybox:latest@sha256:4f399a5baa0b754857bd8ccd5878d7748ded9b25978eb760ea5d2f3e64ef36ab
84
## Pod Security Context
85
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
86
##
87
securityContext:
88
enabled: true
89
fsGroup: 1000
90
runAsUser: 1000
91
resources: {}
92
# We usually recommend not to specify default resources and to leave this as a conscious
93
# choice for the user. This also increases chances charts run on environments with little
94
# resources, such as Minikube. If you do want to specify resources, uncomment the following
95
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
96
# limits:
97
# cpu: 100m
98
# memory: 128Mi
99
# requests:
100
# cpu: 100m
101
# memory: 1000Mi
102
103
livenessProbe:
104
enabled: true
105
readinessProbe:
106
enabled: true
107
nodeSelector: {}
108
tolerations: []
109
affinity: {}
110
## Persist data to a persistent volume
111
persistence:
112
enabled: true
113
## code-server data Persistent Volume Storage Class
114
## If defined, storageClassName: <storageClass>
115
## If set to "-", storageClassName: "", which disables dynamic provisioning
116
## If undefined (the default) or set to null, no storageClassName spec is
117
## set, choosing the default provisioner. (gp2 on AWS, standard on
118
## GKE, AWS & OpenStack)
119
##
120
# storageClass: "-"
121
accessMode: ReadWriteOnce
122
size: 10Gi
123
annotations: {}
124
# existingClaim: ""
125
# hostPath: /data
126
lifecycle:
127
enabled: false
128
# postStart:
129
# exec:
130
# command:
131
# - /bin/bash
132
# - -c
133
# - curl -s -L SOME_SCRIPT | bash
134
# for dind, the following may be helpful
135
# postStart:
136
# exec:
137
# command:
138
# - /bin/sh
139
# - -c
140
# - |
141
# sudo apt-get update \
142
# && sudo apt-get install -y docker.io
143
144
## Enable an Specify container in extraContainers.
145
## This is meant to allow adding code-server dependencies, like docker-dind.
146
extraContainers: ""
147
# If docker-dind is used, DOCKER_HOST env is mandatory to set in "extraVars"
148
# - name: docker-dind
149
# image: docker:28.3.2-dind
150
# imagePullPolicy: IfNotPresent
151
# resources:
152
# requests:
153
# cpu: 1
154
# ephemeral-storage: "50Gi"
155
# memory: 10Gi
156
# securityContext:
157
# privileged: true
158
# procMount: Default
159
# env:
160
# - name: DOCKER_TLS_CERTDIR
161
# value: "" # disable TLS setup
162
# command:
163
# - dockerd
164
# - --host=unix:///var/run/docker.sock
165
# - --host=tcp://0.0.0.0:2376
166
167
extraInitContainers: ""
168
# - name: customization
169
# image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
170
# imagePullPolicy: IfNotPresent
171
# env:
172
# - name: SERVICE_URL
173
# value: https://open-vsx.org/vscode/gallery
174
# - name: ITEM_URL
175
# value: https://open-vsx.org/vscode/item
176
# command:
177
# - sh
178
# - -c
179
# - |
180
# code-server --install-extension ms-python.python
181
# code-server --install-extension golang.Go
182
# volumeMounts:
183
# - name: data
184
# mountPath: /home/coder
185
186
## Additional code-server secret mounts
187
extraSecretMounts: []
188
# - name: secret-files
189
# mountPath: /etc/secrets
190
# subPath: private.key # (optional)
191
# secretName: code-server-secret-files
192
# readOnly: true
193
194
## Additional code-server volume mounts
195
extraVolumeMounts: []
196
# - name: extra-volume
197
# mountPath: /mnt/volume
198
# readOnly: true
199
# existingClaim: volume-claim
200
# hostPath: ""
201
# emptyDir: {}
202
203
extraConfigmapMounts: []
204
# - name: certs-configmap
205
# mountPath: /etc/code-server/ssl/
206
# subPath: certificates.crt # (optional)
207
# configMap: certs-configmap
208
# readOnly: true
209
210
extraPorts: []
211
# - name: minecraft
212
# port: 25565
213
# protocol: tcp
214
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.