Update custom-values.yaml

charts/langfuse/custom-values.yaml

@@ -2,42 +2,32 @@
 langfuse:
   logging:
     level: info
-
   salt:
     value: "Hshs64NHaE0Sw4kfLa/uEcGjyqVQS7U+NdeoF6/6xyM=" # openssl rand -base64 32
-  
   encryptionKey:
     value: "7bcbf030457b00cca6300809233adda0abbee55bc71802519a9720ab2f2c6629"   # openssl rand -hex 32
 
   ingress:
     enabled: true
+    className: "kong"
     annotations: 
       cert-manager.io/cluster-issuer: "selfsigned-issuer"
-
-
-    className: "kong"
     hosts: 
     - host: "langfuse.example.org"
       paths:
         - path: /
           pathType: ImplementationSpecific
-
     tls:
-      enabled: false
+      enabled: true
       secretName: "langfuse-tls"
-
   web:
     image:
       repository: langfuse/langfuse
     resources: {}
     replicas: 1
-
-    
-  # Worker deployment configuration
   worker:
     image:
       repository: langfuse/langfuse-worker
-    
     resources: {}
     replicas: 1
 
@@ -50,6 +40,31 @@ langfuse:
       # secretKeyRef:
       #   name: ""
       #   key: ""
+  additionalEnv:
+    # email/password 로그인 비활성화
+    - name: AUTH_DISABLE_USERNAME_PASSWORD
+      value: "true"
+    # keycloak 연동
+    - name: AUTH_KEYCLOAK_CLIENT_ID
+      value: "langfuse"
+    - name: "AUTH_KEYCLOAK_CLIENT_SECRET"
+      value: "J5xyEzbDcc7VQ89S7yBXRbaM8TYryILI"
+    - name: "AUTH_KEYCLOAK_ISSUER"
+      value: "https://keycloak.example.org/auth/realms/paasup"
+    # keycloak 인증서 등록
+#     - name: "NODE_EXTRA_CA_CERTS"
+#       value: /etc/ssl/certs/ca.crt
+
+# extraVolumes:
+#   - name: keycloak-tls
+#     secret:
+#       secretName: keycloak-tls
+
+# extraVolumeMounts:
+#   - name: keycloak-tls
+#     mountPath: /etc/ssl/certs/ca.crt
+#     subPath: ca.crt
+
 
 # PostgreSQL Configuration
 postgresql:
@@ -65,7 +80,6 @@ postgresql:
 redis:
   auth:
     password: "password"
-    
   primary:
     persistence:
       enabled: true
@@ -90,9 +104,7 @@ s3:
   bucket: "langfuse"
   region: "auto"
   endpoint: "http://minio-api.example.org"
-
   accessKeyId:
     value: "CHaRLr736nSqaNEu4oGz"
-
   secretAccessKey:
     value: "HoZQwXDjZW6ytvTo5DHEfHmuiXykv7xoB9sr8VZo"