Citrix Secure Developer Spaces™

Workspace templates

This article describes workspace templates in Citrix SecurSpaces™ Flex: what they are, how they work, and how to create and manage them. For workspace size options and credit consumption, contact your Citrix sales team.


What is a workspace template?

A workspace template is the primary deployment artifact in Citrix SecurSpaces Flex. It defines the environment that a developer receives when they start a workspace.

A workspace template includes:

  • Container image — The base Linux container image with preinstalled tools, runtimes, and configuration.
  • Preinstalled tools — Languages, SDKs, CLIs, and development tools baked into the image.
  • Resource limits — Maximum vCPU and RAM the workspace is allowed to consume (separate from the workspace size profile; used to set hard limits within a compute tier).
  • Access controls — Which users or user groups can launch workspaces from this template.
  • Startup scripts — Scripts that run at workspace initialization: cloning repositories, configuring dotfiles, mounting secrets, or running setup commands.

What the customer owns

The customer owns and hosts the container image. Citrix does not provide or manage the container image content. The customer is responsible for:

  • Building and maintaining the container image.
  • Hosting the image in a container registry accessible from the Citrix SecurSpaces execution plane (for example, Azure Container Registry, Docker Hub, or a private registry).
  • Patching and updating the image as needed.

Citrix scans the container image for known vulnerabilities when a workspace is launched. Scan results are surfaced to the administrator in the Citrix SecurSpaces console.

Decoupled size and template

Workspace size and workspace template are configured independently. A single template can be paired with any workspace size (Light, Medium, or Heavy) on demand. This means:

  • You do not need a separate template per compute tier.
  • Developers can switch workspace sizes without requiring a new template.
  • Platform engineering teams can standardize on a small number of templates and let workspace size vary by workload.

Create a workspace template

To create a workspace template, you must have the Administrator role in the Citrix SecurSpaces console.

  1. Sign in to your SecurSpaces environment at your organization’s access URL (for example, https://yourcompany.flex.sds.citrix.com).
  2. Go to Administration > Workspace Templates.
  3. Select Create template.
  4. Complete the template configuration:
Field Description
Name A descriptive name for the template (for example, backend-java-21 or data-platform).
Description Optional. A short description shown to administrators.
Container image The full image reference including registry, image name, and tag (for example, myregistry.azurecr.io/dev-image:latest).
Resource limits Optional. Maximum vCPU and RAM limits for workspaces created from this template.
Startup script Optional. A shell script that runs at workspace initialization.
Access The users or groups permitted to launch workspaces from this template.
  1. Select Save to create the template.

The template is now available for workspace creation and is listed on the Workspace Templates page.


Update a workspace template

Updating a template changes the configuration for new workspaces created from it. Existing running workspaces are not affected until they are restarted.

  1. Go to Administration > Workspace Templates.
  2. Select the template you want to update.
  3. Edit the relevant fields.
  4. Select Save.

Note:

If you update the container image tag (for example, from v1.0 to v1.1), new workspaces will use the updated image. Developers with running workspaces must stop and restart their workspace to pick up the new image.


Template versioning

Workspace templates support versioning. Each saved version of a template is recorded. Administrators can:

  • View the version history of a template.
  • Roll back to a previous version if a new image or configuration causes issues.

Delete a workspace template

Deleting a template removes it from the available template list. Existing running workspaces that were created from the deleted template continue to run until they are stopped.

  1. Go to Administration > Workspace Templates.
  2. Select the template you want to delete.
  3. Select Delete.
  4. Confirm the deletion in the dialog.

More information

Workspace templates