🤖 feat: add minimal and quickstart installer manifests

- split installer generation into two outputs:
  - dist/minimal-installer.yaml
  - dist/quickstart-installer.yaml
- keep dist/install.yaml as a compatibility alias to the minimal installer
- move default installer composition to a coder-system-only minimal stack
- add quickstart kustomize resources to seed a namespace, template, and workspace
- update CI freshness checks to validate both generated installer outputs
- refresh getting-started docs to use the minimal installer and optional quickstart seeding

---

_Generated with `mux` • Model: `openai:gpt-5.3-codex` • Thinking: `xhigh` • Cost: `$0.82`_

<!-- mux-attribution: model=openai:gpt-5.3-codex thinking=xhigh costs=0.82 -->

Author: ThomasK33

.github/workflows/ci.yaml

@@ -80,10 +80,15 @@ jobs:
               - 'config/crd/bases/**'
               - 'config/rbac/**'
               - 'config/default/**'
+              - 'config/quickstart/**'
               - 'deploy/deployment.yaml'
+              - 'deploy/apiserver-service.yaml'
+              - 'deploy/apiserver-apiservice.yaml'
               - 'hack/update-manifests.sh'
               - 'Makefile'
               - 'dist/install.yaml'
+              - 'dist/minimal-installer.yaml'
+              - 'dist/quickstart-installer.yaml'
 
   lint:
     needs: changes
@@ -149,6 +154,8 @@ jobs:
           make build-installer
           git diff --exit-code -- \
             dist/install.yaml \
+            dist/minimal-installer.yaml \
+            dist/quickstart-installer.yaml \
             config/crd/bases/ \
             config/rbac/
 

Makefile

@@ -3,8 +3,12 @@ VENDOR_STAMP := vendor/modules.txt
 MODULE_FILES := go.mod $(wildcard go.sum)
 ENVTEST_K8S_VERSION ?= 1.35.x
 ENVTEST_ASSETS_DIR := $(shell pwd)/bin/envtest
+MINIMAL_INSTALLER_MANIFEST := dist/minimal-installer.yaml
+QUICKSTART_INSTALLER_MANIFEST := dist/quickstart-installer.yaml
 INSTALLER_MANIFEST := dist/install.yaml
 INSTALLER_RESOURCES := $(wildcard config/crd/bases/*.yaml) $(wildcard config/rbac/*.yaml)
+MINIMAL_INSTALLER_SOURCES := config/default/kustomization.yaml config/default/namespace-coder-system.yaml deploy/deployment.yaml deploy/apiserver-service.yaml deploy/apiserver-apiservice.yaml
+QUICKSTART_INSTALLER_SOURCES := $(wildcard config/quickstart/*.yaml)
 
 .PHONY: vendor test test-integration setup-envtest build lint vuln verify-vendor codegen manifests build-installer docs-reference docs-reference-check docs-serve docs-build docs-check update-coder-docs-skill kind-dev-up kind-dev-ctx kind-dev-load-image kind-dev-status kind-dev-k9s kind-dev-down
 
@@ -44,11 +48,18 @@ verify-vendor:
 manifests: $(VENDOR_STAMP)
 	bash ./hack/update-manifests.sh
 
-$(INSTALLER_MANIFEST): $(VENDOR_STAMP) config/default/kustomization.yaml config/default/namespace-coder-system.yaml config/default/namespace-coder.yaml deploy/deployment.yaml hack/update-manifests.sh $(INSTALLER_RESOURCES) manifests
+$(MINIMAL_INSTALLER_MANIFEST): $(VENDOR_STAMP) hack/update-manifests.sh $(INSTALLER_RESOURCES) $(MINIMAL_INSTALLER_SOURCES) manifests
 	@mkdir -p $(dir $@)
 	GOFLAGS=$(GOFLAGS) go tool kustomize build --load-restrictor=LoadRestrictionsNone config/default > $@
 
-build-installer: $(INSTALLER_MANIFEST)
+$(QUICKSTART_INSTALLER_MANIFEST): $(VENDOR_STAMP) $(QUICKSTART_INSTALLER_SOURCES)
+	@mkdir -p $(dir $@)
+	GOFLAGS=$(GOFLAGS) go tool kustomize build --load-restrictor=LoadRestrictionsNone config/quickstart > $@
+
+$(INSTALLER_MANIFEST): $(MINIMAL_INSTALLER_MANIFEST)
+	cp $(MINIMAL_INSTALLER_MANIFEST) $(INSTALLER_MANIFEST)
+
+build-installer: $(MINIMAL_INSTALLER_MANIFEST) $(QUICKSTART_INSTALLER_MANIFEST) $(INSTALLER_MANIFEST)
 
 codegen: $(VENDOR_STAMP)
 	bash ./hack/update-codegen.sh

config/default/kustomization.yaml

@@ -2,7 +2,8 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - namespace-coder-system.yaml
-  - namespace-coder.yaml
   - ../crd/bases
   - ../rbac
   - ../../deploy/deployment.yaml
+  - ../../deploy/apiserver-service.yaml
+  - ../../deploy/apiserver-apiservice.yaml

config/quickstart/codertemplate.yaml

@@ -0,0 +1,16 @@
+apiVersion: aggregation.coder.com/v1alpha1
+kind: CoderTemplate
+metadata:
+  name: default.quickstart-template
+  namespace: coder
+spec:
+  organization: default
+  displayName: "Quickstart Template"
+  description: "Template applied by coder-k8s quickstart installer"
+  files:
+    main.tf: |
+      terraform {
+        required_version = ">= 1.0"
+      }
+
+      resource "null_resource" "quickstart" {}

config/quickstart/coderworkspace.yaml

@@ -0,0 +1,9 @@
+apiVersion: aggregation.coder.com/v1alpha1
+kind: CoderWorkspace
+metadata:
+  name: default.me.quickstart-workspace
+  namespace: coder
+spec:
+  organization: default
+  templateName: quickstart-template
+  running: false

config/quickstart/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace-coder.yaml
+  - codertemplate.yaml
+  - coderworkspace.yaml

config/default/namespace-coder.yaml config/quickstart/namespace-coder.yamlconfig/default/namespace-coder.yaml renamed to config/quickstart/namespace-coder.yaml

@@ -1,10 +1,5 @@
 apiVersion: v1
 kind: Namespace
-metadata:
-  name: coder
----
-apiVersion: v1
-kind: Namespace
 metadata:
   name: coder-system
 ---
@@ -5442,6 +5437,20 @@ subjects:
   name: coder-k8s
   namespace: coder-system
 ---
+apiVersion: v1
+kind: Service
+metadata:
+  name: coder-k8s-apiserver
+  namespace: coder-system
+spec:
+  ports:
+  - name: https
+    port: 443
+    protocol: TCP
+    targetPort: 6443
+  selector:
+    app: coder-k8s
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -5476,3 +5485,17 @@ spec:
             path: /readyz
             port: health
       serviceAccountName: coder-k8s
+---
+apiVersion: apiregistration.k8s.io/v1
+kind: APIService
+metadata:
+  name: v1alpha1.aggregation.coder.com
+spec:
+  group: aggregation.coder.com
+  groupPriorityMinimum: 1000
+  insecureSkipTLSVerify: true
+  service:
+    name: coder-k8s-apiserver
+    namespace: coder-system
+  version: v1alpha1
+  versionPriority: 100