RStudio Server module

[bpmct]

A discussion dedicated to the RStudio Server module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 25	19 / 25	10 / 20	0 / 20	7 / 10	53 / 100

Drilldown

Presentation & Onboarding — 17 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	6	README shows one basic example with minimal configuration. No examples demonstrating different modes (e.g., auth enabled vs disabled, different project paths, renv enabled/disabled).
Coder-context framing	8	6	Mentions Coder workspace and shows basic integration, but does not explain what RStudio Server adds on top of Coder or where Coder fits in the R development flow.
Visual preview	5	5	README includes an embedded image: 

IDE Integration — 19 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	coder_app resource present with proper configuration (subdomain, icon, URL).
Managed configuration	6	6	Documented support for managed configuration via disable_auth, rstudio_user, rstudio_password, enable_renv variables.
Configurable folder or workdir	6	6	project_path variable documented and implemented, mounts the specified path into the container at /home/${RSTUDIO_USER}/project.
Pre-installed extensions	6	0	Not applicable for RStudio Server; no extension mechanism documented.

Credential Hygiene — 10 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	rstudio_user and rstudio_password variables are marked sensitive = true in main.tf, but README example does not show credential handling (no inline secrets, but also no example of how to pass them). Defaults are hardcoded as "rstudio"/"rstudio" in the module itself.
Non-hardcoded auth path	4	2	README mentions disable_auth option but does not document alternative auth paths like OAuth, LDAP, or external auth integration. Partial credit for the disable option.

Restricted-Environment Readiness — 0 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	0	No variable to override the Docker image source. The image rocker/rstudio:${SERVER_VERSION} is hardcoded in run.sh with only version parameterization.
Bring-your-own binary	5	0	No documented way to skip the docker pull or use a pre-existing container/image.
Egress transparency	3	0	No dedicated README section enumerating external endpoints (Docker Hub for image pull, CRAN for renv packages). Endpoints are only inferable from code.
Runs without sudo	2	0	Script invokes docker commands which typically require either sudo or docker group membership. No documentation of non-sudo path or rootless docker setup.

Engineering Quality — 7 / 10

Criterion	Max	Score	Notes
Input quality	6	4	Most inputs have descriptions. share has validation. However, several lack validation (e.g., port could validate range, project_path has no validation). Some defaults are questionable (hardcoded credentials).
Test coverage	4	3	No .tftest.hcl or test files visible in the provided module files. Partial credit for the NOTE in README requiring docker, suggesting some testing consideration.

Overall — 53 / 100

---

Scored against SCORECARD.md on 2026-08-17 with claude-sonnet-4-5.