fix(code-server): Talos admin

.rtx.toml

@@ -14,6 +14,7 @@ talosctl = ["1.5.4", "1.3.6"]
 talhelper = ["1.16.2"]
 cilium-cli= ["0.15.14"]
 1password-cli = ["2.24.0"]
+restic = ["0.16.4"]
 
 #pulumi = ["3.95.0"]
 

Taskfile.dist.yaml

@@ -40,6 +40,7 @@ tasks:
 
   gitconfig:
     desc: Configure Git.
+    dir: '{{.USER_WORKING_DIR}}'
     cmds:
       - git config commit.gpgSign true
       - git config pull.rebase true

kube/deploy/apps/code-server/app/hr.yaml

@@ -164,6 +164,16 @@ spec:
               - subPath: "ssh-pubkey"
                 path: "/home/coder/.ssh/id_rsa.pub"
                 readOnly: true
+      talos-admin:
+        enabled: true
+        type: secret
+        name: "talos"
+        defaultMode: 0400
+        advancedMounts:
+          main:
+            main:
+              - path: "/var/run/secrets/talos.dev"
+                readOnly: true
       tmp:
         enabled: true
         type: emptyDir

kube/deploy/apps/code-server/app/rbac.yaml

@@ -11,3 +11,11 @@ subjects:
   - kind: ServiceAccount
     name: *app
     namespace: *app
+---
+apiVersion: talos.dev/v1alpha1
+kind: ServiceAccount
+metadata:
+  name: talos
+spec:
+  roles:
+    - os:admin