diff --git a/charts/langfuse/CUSTOM-README.md b/charts/langfuse/CUSTOM-README.md index eba8d25..b4ee895 100644 --- a/charts/langfuse/CUSTOM-README.md +++ b/charts/langfuse/CUSTOM-README.md @@ -170,4 +170,42 @@ s3: value: "CHaRLr736nSqaNEu4oGz" secretAccessKey: value: "HoZQwXDjZW6ytvTo5DHEfHmuiXykv7xoB9sr8VZo" -``` \ No newline at end of file +``` + + +## 7. Keycloak Oauth 연동 설정 + +- 다음은 keycloak 연동을 위해 설정. + +``` yaml +langfuse: + # NextAuth configuration + nextauth: + url: http://langfuse.example.org + secret: + value: "L/mKkKmVBAs5Dwc54PiTpmjGrA/KRhdDJ2jLFcCDm4Y=" # openssl rand -base64 32 + additionalEnv: + # email/password 로그인 비활성화 + - name: AUTH_DISABLE_USERNAME_PASSWORD + value: "true" + # keycloak 연동 + - name: AUTH_KEYCLOAK_CLIENT_ID + value: "langfuse" + - name: "AUTH_KEYCLOAK_CLIENT_SECRET" + value: "J5xyEzbDcc7VQ89S7yBXRbaM8TYryILI" + - name: "AUTH_KEYCLOAK_ISSUER" + value: "https://keycloak.example.org/auth/realms/paasup" + # keycloak 인증서 등록 - 사설 인증서 사용시 필요 + - name: "NODE_EXTRA_CA_CERTS" + value: /etc/ssl/certs/ca.crt + +# keycloak 인증서 secret을 마운트 +extraVolumes: + - name: keycloak-tls + secret: + secretName: keycloak-tls +extraVolumeMounts: + - name: keycloak-tls + mountPath: /etc/ssl/certs/ca.crt + subPath: ca.crt +```