This is a feature on our roadmap now.

@sharkymark Will this include similar features to "Live Share" extension from the official Microsoft Marketplace? I know gitpod does allow to share access and snapshots. I think this feature will allow really cool use cases. Right now only owners can see others workspaces, probably adding another role with workspaces privileges could speed up this feature?

See #4786 for additional context!

This is tricky to get right from a security perspective. Since there are existing third-party solutions such as Live Share and tmate, I doubt we'll get to this in the next few months and am closing accordingly.

I need a streamlined method to allow other developers access to specific workspaces. As an "Owner," I have full access to all workspaces in our organization, including the ability to log in. I'm seeking a way to extend similar access to non-owner members.

Potential solutions I'm considering:

• Introduce a "Workspace Admin" role that grants access to all workspaces without "Owner" or "Template Admin" privileges.
• Implement a workspace-sharing feature that allows specifying users or groups for access.
• Create an option for workspaces to be accessible over SSH to all users.

I am looking for guidance or existing solutions to achieve this.

Reopening as requested again in #12696 by @arel

We are working on a concept at KubeCon Paris that implements this in an interesting way.

https://github.com/ii/iipod has our OCI image/container + coder template, which creates:

persistant

• a k8s namespace : USERNAME
• dns sudomain : USERNAME.coder.wildcard.domain
• wildcard TLS certificate / secret : *.USERNAME.coder.wildcard.domain

ephemeral

• deployment of iipod
  • left/right tmux (aka left/right eye)
    • https://left-eye-SPACENAME.USERNAME.coder.wildcard.domain
    • https://right-eye-SPACENAME.USERNAME.coder.wildcard.domain
  • vnc (resizes to last person to change size)
    • https://vnc-SPACENAME.USERNAME.coder.wildcard.domain
  • emacs (BroadwayD / gtk3 web interface)
    • https://emacs-SPACENAME.USERNAME.coder.wildcard.domain

ttyd and novnc used to expose tmux and tigervnc sockets.

As a replacement for tmate, may I suggest https://github.com/ii/matey

@bpmct 👀

@matifali if you are planing to implement such feature please consider an option to fully disable this (this should not be on by default anyways). For us this is not an option in concern of security.

Thank you @MrPeacockNLB. It would of course be controllable probably at the template level as we move towards controlling all settings of a template as IaC.

@MrPeacockNLB, we're working on improving RBAC with custom roles. You can adjust any of these things to your heart's desire in the future!

I'd like to bring forward the idea of the coder agent somehow notifying the workspace that someone has joined, so actions can happen to include them in the commit messages:

From #7605 (comment)

Ideally working in some ability to notify via coder agent the list of current invitees (and currently connected ones), to help create multi-user commits.

Co-Authored-By: Foo Bar <[email protected]>
Co-Authored-By: Bar Baz <[email protected]>
Co-Authored-By: Foo Foo <[email protected]>

is there a beta or eta for this?