feature: seed default index page on empty volume

LuukBlankenstijn · claude · LuukBlankenstijn · commit d80ead8b02d8 · 2026-06-03T21:05:17.000+02:00
Adds an init container that writes a minimal landing page with the GEWIS
logo on first deploy. The PVC is now organised with served content under
site/ and a .initialized sentinel at the volume root; caddy and code-server
mount via subPath: site so they cannot see or overwrite the sentinel.

Co-Authored-By: Claude Opus 4.7 &lt;noreply@anthropic.com&gt;
diff --git a/Chart.yaml b/Chart.yaml
@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.1
+version: 0.1.2
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/templates/caddy-deployment.yaml b/templates/caddy-deployment.yaml
@@ -15,6 +15,25 @@ spec:
       labels:
         {{- include "static-webhost.componentSelectorLabels" (dict "Context" . "Component" "caddy") | nindent 8 }}
     spec:
+      initContainers:
+        - name: seed-default-index
+          image: "{{ .Values.caddy.image.repository }}:{{ .Values.caddy.image.tag }}"
+          imagePullPolicy: {{ .Values.caddy.image.pullPolicy }}
+          command:
+            - sh
+            - -c
+            - |
+              if [ ! -f /data/.initialized ]; then
+                mkdir -p /data/site
+                cp /defaults/index.html /data/site/index.html
+                touch /data/.initialized
+              fi
+          volumeMounts:
+            - name: data
+              mountPath: /data
+            - name: default-index
+              mountPath: /defaults
+              readOnly: true
       containers:
         - name: caddy
           image: "{{ .Values.caddy.image.repository }}:{{ .Values.caddy.image.tag }}"
@@ -26,6 +45,7 @@ spec:
           volumeMounts:
             - name: data
               mountPath: /srv
+              subPath: site
               readOnly: true
             - name: caddyfile
               mountPath: /etc/caddy/Caddyfile
@@ -41,3 +61,6 @@ spec:
         - name: caddyfile
           configMap:
             name: {{ include "static-webhost.fullname" . }}-caddy
+        - name: default-index
+          configMap:
+            name: {{ include "static-webhost.fullname" . }}-default-index
diff --git a/templates/code-server-deployment.yaml b/templates/code-server-deployment.yaml
@@ -32,6 +32,7 @@ spec:
           volumeMounts:
             - name: data
               mountPath: /srv
+              subPath: site
           {{- with .Values.codeServer.resources }}
           resources:
             {{- toYaml . | nindent 12 }}
diff --git a/templates/default-index-configmap.yaml b/templates/default-index-configmap.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ include "static-webhost.fullname" . }}-default-index
+  labels:
+    {{- include "static-webhost.labels" . | nindent 4 }}
+data:
+  index.html: |
+    <!doctype html>
+    <html lang="en">
+    <head>
+      <meta charset="utf-8">
+      <title>{{ index .Values.domains 0 }}</title>
+      <style>
+        html, body { margin: 0; height: 100%; }
+        body { display: grid; place-items: center; background: #fff; font-family: system-ui, sans-serif; }
+        img { width: 160px; height: 160px; }
+      </style>
+    </head>
+    <body>
+      <img src="{{ .Values.defaultPage.logoUrl }}" alt="GEWIS">
+    </body>
+    </html>
diff --git a/values.yaml b/values.yaml
@@ -33,6 +33,13 @@ oidc:
   # by emberstack reflector; this chart only mirrors the empty Secret shell.
   secretReflectsFrom: shared-secrets/oidc-auth
 
+# Default landing page seeded into an empty volume on first deploy.
+# The seed init container writes index.html and a .initialized sentinel; once
+# the sentinel exists it's a no-op, so user edits via code-server survive
+# subsequent rollouts.
+defaultPage:
+  logoUrl: https://github.com/GEWIS.png
+
 # code-server (VS Code in the browser) — edits the shared volume.
 codeServer:
   image:
