chore: update workload runtime integration

apps/code-server/README.md

@@ -1,7 +1,17 @@
 # code-server
 
-The base deploys code-server with a PVC, Service, and password Secret reference.
+The base deploys code-server from `harbor.bwgdi.com/library/earth2studio-demo:v6`
+with a Service and password Secret reference.
 
-The Secret is generated by the instance overlay. Do not commit real passwords or
-tokens to this catalog.
+The Secret is generated by the instance overlay. Workspace storage is mounted
+from top-level WorkloadClaim `storage`, and exposure is rendered from top-level
+`exposure`. Do not commit real passwords or tokens to this catalog.
 
+The WorkloadTemplate exposes storage intent (`temporary`, `retained`,
+`existing`) and exposure intent (`internal`, `external`) as claim-time choices.
+Workspace storage defaults to retained. The template also mounts a hidden
+retained `weight` StorageClass PVC at `/models` for model weights; this
+StorageClass detail is platform-owned and is not exposed as a user parameter.
+
+The Deployment keeps HAMi resource keys in `resources.limits` at all times:
+`nvidia.com/gpu` for GPU count and `nvidia.com/gpumem` for GPU memory in MiB.

apps/code-server/base/deployment.yaml

@@ -19,18 +19,23 @@ spec:
         app.kubernetes.io/component: ide
         app.kubernetes.io/part-of: ocdp-workload
     spec:
+      imagePullSecrets:
+        - name: regcred
+      schedulerName: hami-scheduler
       securityContext:
         fsGroup: 1000
       containers:
         - name: code-server
-          image: codercom/code-server:latest
+          image: harbor.bwgdi.com/library/earth2studio-demo:v6
           imagePullPolicy: IfNotPresent
+          command:
+            - code-server
           args:
             - --bind-addr
             - 0.0.0.0:8080
             - --auth
             - password
-            - /home/coder/project
+            - /workspace
           env:
             - name: PASSWORD
               valueFrom:
@@ -55,11 +60,5 @@ spec:
             limits:
               cpu: "2"
               memory: 4Gi
-          volumeMounts:
-            - name: workspace
-              mountPath: /home/coder/project
-      volumes:
-        - name: workspace
-          persistentVolumeClaim:
-            claimName: code-server-data
-
+              nvidia.com/gpu: "1"
+              nvidia.com/gpumem: "8192"

apps/code-server/base/kustomization.yaml

@@ -1,7 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - pvc.yaml
   - deployment.yaml
   - service.yaml
-

apps/code-server/base/pvc.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: code-server-data
-  labels:
-    app.kubernetes.io/name: code-server
-    app.kubernetes.io/component: workspace-storage
-    app.kubernetes.io/part-of: ocdp-workload
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 20Gi
-

apps/code-server/components/nfs/kustomization.yaml

@@ -1,8 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1alpha1
-kind: Component
-patches:
-  - path: pvc-rwx-patch.yaml
-    target:
-      kind: PersistentVolumeClaim
-      name: code-server-data
-

apps/code-server/components/nfs/pvc-rwx-patch.yaml

@@ -1,4 +0,0 @@
-- op: replace
-  path: /spec/accessModes/0
-  value: ReadWriteMany
-