Added tenant-b + removed name in config to use path

gitops/tenants/appset.yaml

@@ -5,6 +5,7 @@ metadata:
   namespace: argocd
 spec:
   goTemplate: true
+  goTemplateOptions: ["missingkey=error"]
   generators:
     - git:
         repoURL: https://git.bouvais.lu/adrien/ctie-exercice
@@ -13,7 +14,7 @@ spec:
           - path: "tenants/*/config.yaml"
   template:
     metadata:
-      name: 'tenant-{{.name}}'
+      name: 'tenant-{{ trimPrefix "tenant-" .path.basename }}'
     spec:
       project: tenants
       sources:
@@ -22,13 +23,16 @@ spec:
           path: charts/tenant
           helm:
             valueFiles:
-              - '$values/tenants/tenant-{{.name}}/config.yaml'
+              - '$values/{{.path.path}}/config.yaml'
+            parameters:
+              - name: name
+                value: '{{ trimPrefix "tenant-" .path.basename }}'
         - repoURL: https://git.bouvais.lu/adrien/ctie-exercice
           targetRevision: main
           ref: values
       destination:
         server: https://kubernetes.default.svc
-        namespace: 'tenant-{{.name}}'
+        namespace: 'tenant-{{ trimPrefix "tenant-" .path.basename }}'
       syncPolicy:
         automated:
           prune: true

images/base/dockerfile

@@ -4,14 +4,12 @@ LABEL org.opencontainers.image.title="tenant-base" \
       org.opencontainers.image.description="Hardened base image for tenant workspaces" \
       org.opencontainers.image.source="https://git.bouvais.lu/adrien/"
 
-# System deps only — keep this layer stable so it's rarely rebuilt
 RUN apt-get update && apt-get install -y --no-install-recommends \
         ca-certificates \
         curl \
         tini \
     && rm -rf /var/lib/apt/lists/*
 
-# Non-root user, fixed UID/GID for predictable K8s securityContext
 RUN groupadd --gid 1000 appuser \
     && useradd --uid 1000 --gid appuser --shell /bin/bash --create-home appuser
 

images/jupyter/dockerfile

@@ -10,7 +10,6 @@ COPY --chown=appuser:appuser requirements.txt /tmp/requirements.txt
 RUN pip install --no-cache-dir -r /tmp/requirements.txt \
     && rm /tmp/requirements.txt
 
-# No secrets baked in — S3 creds come from a mounted K8s Secret / env at runtime
 USER appuser
 WORKDIR /home/appuser/work
 

tenants/tenant-a/config.yaml

@@ -1,5 +1,3 @@
-name: "a" # TODO: Remove this and use path instead
-
 image:
   repository: registry.bouvais.lu/tenant-jupyter
   tag: "1.0.0"
@@ -12,8 +10,3 @@ resources:
     cpu: "1"
     memory: 2Gi
 
-gpu:
-  enabled: true
-  type: "t4"          # one of: none | t4 | a100 | l4
-  count: 1
-

tenants/tenant-b/config.yaml

@@ -0,0 +1,13 @@
+name: "b"
+
+image:
+  repository: registry.bouvais.lu/tenant-jupyter
+  tag: "latest"
+
+resources:
+  requests:
+    cpu: 250m
+    memory: 512Mi
+  limits:
+    cpu: "1"
+    memory: 2Gi