Add Keycloak SSO setup guide to CUSTOM-README.md

2025-03-06 09:21:17 +09:00
parent 59f4a97cab
commit cf6772e663
1 changed files with 39 additions and 1 deletions
@@ -171,3 +171,41 @@ s3:
  secretAccessKey:
    value: "HoZQwXDjZW6ytvTo5DHEfHmuiXykv7xoB9sr8VZo"
 ```
+
+
+## 7. Keycloak Oauth 연동 설정
+
+- 다음은 keycloak 연동을 위해 설정.
+
+``` yaml
+langfuse:
+  # NextAuth configuration
+  nextauth:
+    url: http://langfuse.example.org
+    secret:
+      value: "L/mKkKmVBAs5Dwc54PiTpmjGrA/KRhdDJ2jLFcCDm4Y=" # openssl rand -base64 32
+  additionalEnv:
+    # email/password 로그인 비활성화
+    - name: AUTH_DISABLE_USERNAME_PASSWORD
+      value: "true"
+    # keycloak 연동
+    - name: AUTH_KEYCLOAK_CLIENT_ID
+      value: "langfuse"
+    - name: "AUTH_KEYCLOAK_CLIENT_SECRET"
+      value: "J5xyEzbDcc7VQ89S7yBXRbaM8TYryILI"
+    - name: "AUTH_KEYCLOAK_ISSUER"
+      value: "https://keycloak.example.org/auth/realms/paasup"
+    # keycloak 인증서 등록 - 사설 인증서 사용시 필요
+    - name: "NODE_EXTRA_CA_CERTS"
+      value: /etc/ssl/certs/ca.crt
+
+# keycloak 인증서 secret을 마운트
+extraVolumes:
+  - name: keycloak-tls
+    secret:
+      secretName: keycloak-tls
+extraVolumeMounts:
+  - name: keycloak-tls
+    mountPath: /etc/ssl/certs/ca.crt
+    subPath: ca.crt
+```