Add langfuse chart 1.0.0-rc.2
This commit is contained in:
wbsong111
@@ -0,0 +1,509 @@
|
||||
# Langfuse Helm Chart Configuration
|
||||
|
||||
# -- Override the name for the selector labels, defaults to the chart name
|
||||
nameOverride: ""
|
||||
|
||||
# -- Override the full name of the deployed resources, defaults to a combination of the release name and the name for the selector labels
|
||||
fullnameOverride: ""
|
||||
|
||||
# Core Langfuse Configuration
|
||||
langfuse:
|
||||
# Logging configuration
|
||||
logging:
|
||||
# -- Set the log level for the application (trace, debug, info, warn, error, fatal)
|
||||
level: info
|
||||
# -- Set the log format for the application (text or json)
|
||||
format: text
|
||||
|
||||
# -- Used to hash API keys. Can be configured by value or existing secret reference. To generate a new salt, run `openssl rand -base64 32`.
|
||||
salt:
|
||||
value: ""
|
||||
secretKeyRef:
|
||||
name: ""
|
||||
key: ""
|
||||
|
||||
# -- Langfuse EE license key.
|
||||
licenseKey:
|
||||
value: ""
|
||||
secretKeyRef:
|
||||
name: ""
|
||||
key: ""
|
||||
|
||||
# -- Used to encrypt sensitive data. Must be 256 bits (64 string characters in hex format). Generate via `openssl rand -hex 32`.
|
||||
encryptionKey:
|
||||
value: ""
|
||||
secretKeyRef:
|
||||
name: ""
|
||||
key: ""
|
||||
|
||||
# Feature flags
|
||||
features:
|
||||
# -- Whether or not to report basic usage statistics to a centralized server.
|
||||
telemetryEnabled: true
|
||||
# -- Disable public sign up
|
||||
signUpDisabled: false
|
||||
# -- Enable experimental features
|
||||
experimentalFeaturesEnabled: false
|
||||
|
||||
# -- Node.js environment to use for all langfuse deployments
|
||||
nodeEnv: production
|
||||
|
||||
serviceAccount:
|
||||
# -- Whether to create a service account for all langfuse deployments
|
||||
create: true
|
||||
# -- Annotations for the service account
|
||||
annotations: {}
|
||||
# -- Override the name of the service account to use, discovered automatically if not set
|
||||
name: ""
|
||||
|
||||
ingress:
|
||||
# -- Set to `true` to enable the ingress resource
|
||||
enabled: false
|
||||
# -- Additional labels for the ingress resource
|
||||
additionalLabels: {}
|
||||
# -- Annotations for the ingress resource
|
||||
annotations: {}
|
||||
# -- The class name for the ingress resource
|
||||
className: ""
|
||||
# -- The hosts for the ingress resource
|
||||
hosts: []
|
||||
# Example:
|
||||
# - host: "langfuse.example.com"
|
||||
# paths:
|
||||
# - path: /
|
||||
# pathType: ImplementationSpecific
|
||||
|
||||
tls:
|
||||
# -- Set to `true` to enable use HTTPS on the ingress
|
||||
enabled: false
|
||||
# -- The name of the secret to use for TLS Key
|
||||
secretName: ""
|
||||
|
||||
# -- Pod annotations for all langfuse deployments
|
||||
podAnnotations: {}
|
||||
# -- Pod security context for all langfuse deployments
|
||||
podSecurityContext: {}
|
||||
# -- Security context for all langfuse deployments
|
||||
securityContext: {}
|
||||
# -- Node selector for all langfuse deployments
|
||||
nodeSelector: {}
|
||||
# -- Tolerations for all langfuse deployments
|
||||
tolerations: []
|
||||
# -- Affinity for all langfuse deployments
|
||||
affinity: {}
|
||||
|
||||
|
||||
# -- Number of replicas to use for all langfuse deployments. Can be overridden by the individual deployments
|
||||
replicas: 1
|
||||
# -- Resources for all langfuse deployments. Can be overridden by the individual deployments
|
||||
resources: {}
|
||||
image:
|
||||
# -- The image tag to use for all langfuse deployments. Can be overridden by the individual deployments. Falls back to appVersion if not set.
|
||||
tag: Null
|
||||
# -- The pull policy to use for all langfuse deployments. Can be overridden by the individual deployments.
|
||||
pullPolicy: Always
|
||||
# -- The pull secrets to use for all langfuse deployments. Can be overridden by the individual deployments.
|
||||
pullSecrets: []
|
||||
|
||||
# -- List of additional environment variables to be added to all langfuse deployments. See [documentation](https://langfuse.com/docs/deployment/self-host#configuring-environment-variables) for details.
|
||||
additionalEnv: []
|
||||
# -- Allows additional containers to be added to all langfuse deployments
|
||||
extraContainers: []
|
||||
# -- Allows additional volumes to be added to all langfuse deployments
|
||||
extraVolumes: []
|
||||
# -- Allows additional init containers to be added to all langfuse deployments
|
||||
extraInitContainers: []
|
||||
# -- Allows additional volume mounts to be added to all langfuse deployments
|
||||
extraVolumeMounts: []
|
||||
|
||||
# Web deployment configuration
|
||||
web:
|
||||
image:
|
||||
# -- The image repository to use for the langfuse web pods.
|
||||
repository: langfuse/langfuse
|
||||
# -- The tag to use for the langfuse web pods. Using `langfuse.image.tag` if not set.
|
||||
tag: Null
|
||||
# -- The pull policy to use for the langfuse web pods. Using `langfuse.image.pullPolicy` if not set.
|
||||
pullPolicy: Null
|
||||
# -- The pull secrets to use for the langfuse web pods. Using `langfuse.image.pullSecrets` if not set.
|
||||
pullSecrets: Null
|
||||
|
||||
service:
|
||||
# -- The type of service to use for the langfuse web application
|
||||
type: ClusterIP
|
||||
# -- The port to use for the langfuse web application
|
||||
port: 3000
|
||||
# -- The node port to use for the langfuse web application
|
||||
nodePort: null
|
||||
# -- Additional labels for the langfuse web application service
|
||||
additionalLabels: {}
|
||||
# -- Annotations for the langfuse web application service
|
||||
annotations: {}
|
||||
|
||||
# -- Resources for the langfuse web pods. Defaults to the global resources
|
||||
resources: {}
|
||||
|
||||
# -- Number of replicas to use if HPA is not enabled. Defaults to the global replicas
|
||||
replicas: null
|
||||
|
||||
# Horizontal Pod Autoscaler configuration
|
||||
hpa:
|
||||
# -- Set to `true` to enable HPA for the langfuse web pods
|
||||
enabled: false
|
||||
# -- The minimum number of replicas to use for the langfuse web pods
|
||||
minReplicas: 1
|
||||
# -- The maximum number of replicas to use for the langfuse web pods
|
||||
maxReplicas: 2
|
||||
# -- The target CPU utilization percentage for the langfuse web pods
|
||||
targetCPUUtilizationPercentage: 50
|
||||
|
||||
# Vertical Pod Autoscaler configuration
|
||||
vpa:
|
||||
# -- Set to `true` to enable VPA for the langfuse web pods
|
||||
enabled: false
|
||||
# -- The resources to control for the langfuse web pods
|
||||
controlledResources: []
|
||||
# -- The maximum allowed resources for the langfuse web pods
|
||||
maxAllowed: {}
|
||||
# -- The minimum allowed resources for the langfuse web pods
|
||||
minAllowed: {}
|
||||
updatePolicy:
|
||||
# -- The update policy mode for the langfuse web pods
|
||||
updateMode: Auto
|
||||
|
||||
# -- Adding records to /etc/hosts in the pod's network.
|
||||
hostAliases: []
|
||||
|
||||
livenessProbe:
|
||||
# -- Path to check for liveness.
|
||||
path: "/api/public/health"
|
||||
# -- Initial delay seconds for livenessProbe.
|
||||
initialDelaySeconds: 20
|
||||
# -- Period seconds for livenessProbe.
|
||||
periodSeconds: 10
|
||||
# -- Timeout seconds for livenessProbe.
|
||||
timeoutSeconds: 5
|
||||
# -- Failure threshold for livenessProbe.
|
||||
failureThreshold: 3
|
||||
# -- Success threshold for livenessProbe.
|
||||
successThreshold: 1
|
||||
|
||||
readinessProbe:
|
||||
# -- Path to check for readiness.
|
||||
path: "/api/public/ready"
|
||||
# -- Initial delay seconds for readinessProbe.
|
||||
initialDelaySeconds: 20
|
||||
# -- Period seconds for readinessProbe.
|
||||
periodSeconds: 10
|
||||
# -- Timeout seconds for readinessProbe.
|
||||
timeoutSeconds: 5
|
||||
# -- Failure threshold for readinessProbe.
|
||||
failureThreshold: 3
|
||||
# -- Success threshold for readinessProbe.
|
||||
successThreshold: 1
|
||||
|
||||
# Worker deployment configuration
|
||||
worker:
|
||||
image:
|
||||
# -- The image repository to use for the langfuse worker pods
|
||||
repository: langfuse/langfuse-worker
|
||||
# -- The tag to use for the langfuse worker pods. Using `langfuse.image.tag` if not set.
|
||||
tag: Null
|
||||
# -- The pull policy to use for the langfuse worker pods. Using `langfuse.image.pullPolicy` if not set.
|
||||
pullPolicy: Null
|
||||
# -- The pull secrets to use for the langfuse worker pods. Using `langfuse.image.pullSecrets` if not set.
|
||||
pullSecrets: Null
|
||||
|
||||
# -- Resources for the langfuse worker pods. Defaults to the global resources
|
||||
resources: {}
|
||||
|
||||
# -- Number of replicas to use if HPA is not enabled. Defaults to the global replicas
|
||||
replicas: null
|
||||
|
||||
# Horizontal Pod Autoscaler configuration
|
||||
hpa:
|
||||
# -- Set to `true` to enable HPA for the langfuse worker pods
|
||||
enabled: false
|
||||
# -- The minimum number of replicas to use for the langfuse worker pods
|
||||
minReplicas: 1
|
||||
# -- The maximum number of replicas to use for the langfuse worker pods
|
||||
maxReplicas: 2
|
||||
# -- The target CPU utilization percentage for the langfuse worker pods
|
||||
targetCPUUtilizationPercentage: 50
|
||||
|
||||
# Vertical Pod Autoscaler configuration
|
||||
vpa:
|
||||
# -- Set to `true` to enable VPA for the langfuse worker pods
|
||||
enabled: false
|
||||
# -- The resources to control for the langfuse worker pods
|
||||
controlledResources: []
|
||||
# -- The maximum allowed resources for the langfuse worker pods
|
||||
maxAllowed: {}
|
||||
# -- The minimum allowed resources for the langfuse worker pods
|
||||
minAllowed: {}
|
||||
updatePolicy:
|
||||
# -- The update policy mode for the langfuse worker pods
|
||||
updateMode: Auto
|
||||
|
||||
livenessProbe:
|
||||
# -- Initial delay seconds for livenessProbe.
|
||||
initialDelaySeconds: 20
|
||||
# -- Period seconds for livenessProbe.
|
||||
periodSeconds: 10
|
||||
# -- Timeout seconds for livenessProbe.
|
||||
timeoutSeconds: 5
|
||||
# -- Failure threshold for livenessProbe.
|
||||
failureThreshold: 3
|
||||
# -- Success threshold for livenessProbe.
|
||||
successThreshold: 1
|
||||
|
||||
# NextAuth configuration
|
||||
nextauth:
|
||||
# -- When deploying to production, set the `nextauth.url` value to the canonical URL of your site.
|
||||
url: http://localhost:3000
|
||||
# -- Used to encrypt the NextAuth.js JWT, and to hash email verification tokens. Can be configured by value or existing secret reference.
|
||||
secret:
|
||||
value: ""
|
||||
secretKeyRef:
|
||||
name: ""
|
||||
key: ""
|
||||
|
||||
# PostgreSQL Configuration
|
||||
postgresql:
|
||||
# -- Deploy subchart or use external database
|
||||
deploy: true
|
||||
|
||||
# -- Hostname of the postgres server to use. If `postgresql.deploy` is true, this will be set automatically based on the release name.
|
||||
host: ""
|
||||
# -- Port of the postgres server to use. Defaults to 5432.
|
||||
port: null
|
||||
# -- Additional database connection arguments
|
||||
args: ""
|
||||
|
||||
# -- If `postgresql.deploy` is set to false, Connection string of your Postgres database used for database migrations. Use this if you want to use a different user for migrations or use connection pooling on DATABASE_URL. For large deployments, configure the database user with long timeouts as migrations might need a while to complete.
|
||||
directUrl: ""
|
||||
|
||||
# -- If your database user lacks the CREATE DATABASE permission, you must create a shadow database and configure the "SHADOW_DATABASE_URL". This is often the case if you use a Cloud database. Refer to the Prisma docs for detailed instructions.
|
||||
shadowDatabaseUrl: ""
|
||||
|
||||
# Authentication configuration
|
||||
auth:
|
||||
# -- Username to use to connect to the postgres database deployed with Langfuse. In case `postgresql.deploy` is set to `true`, the user will be created automatically.
|
||||
username: postgres
|
||||
# -- Password to use to connect to the postgres database deployed with Langfuse. In case `postgresql.deploy` is set to `true`, the password will be set automatically.
|
||||
password: ""
|
||||
# -- If you want to use an existing secret for the postgres password, set the name of the secret here. (`postgresql.auth.username` and `postgresql.auth.password` will be ignored and picked up from this secret).
|
||||
existingSecret: ""
|
||||
# -- The key in the existing secret that contains the password.
|
||||
secretKeys:
|
||||
userPasswordKey: password
|
||||
# -- Database name to use for Langfuse.
|
||||
database: postgres_langfuse
|
||||
# -- Additional database connection arguments
|
||||
args: ""
|
||||
|
||||
# Migration configuration
|
||||
migration:
|
||||
# -- Whether to run automatic migrations on startup
|
||||
autoMigrate: false
|
||||
|
||||
# Subchart specific settings
|
||||
architecture: standalone
|
||||
primary:
|
||||
service:
|
||||
ports:
|
||||
postgresql: 5432
|
||||
|
||||
# Key-Value Store / Redis Configuration
|
||||
redis:
|
||||
# -- Enable valkey deployment (via Bitnami Helm Chart). If you want to use a Redis or Valkey server already deployed, set to false.
|
||||
deploy: true
|
||||
|
||||
# -- Redis host to connect to. If redis.deploy is true, this will be set automatically based on the release name.
|
||||
host: ""
|
||||
# -- Redis port to connect to.
|
||||
port: 6379
|
||||
|
||||
# Authentication configuration
|
||||
auth:
|
||||
# -- Configure the password by value or existing secret reference
|
||||
password: ""
|
||||
# -- If you want to use an existing secret for the redis password, set the name of the secret here. (`redis.auth.password` will be ignored and picked up from this secret).
|
||||
existingSecret: ""
|
||||
# -- The key in the existing secret that contains the password.
|
||||
existingSecretPasswordKey: ""
|
||||
|
||||
database: 0
|
||||
|
||||
# Subchart specific settings
|
||||
architecture: standalone
|
||||
primary:
|
||||
# -- Extra flags for the valkey deployment. Must include `--maxmemory-policy noeviction`.
|
||||
extraFlags:
|
||||
- "--maxmemory-policy noeviction"
|
||||
|
||||
# ClickHouse Configuration
|
||||
clickhouse:
|
||||
# -- Enable ClickHouse deployment (via Bitnami Helm Chart). If you want to use an external Clickhouse server (or a managed one), set this to false
|
||||
deploy: true
|
||||
|
||||
# -- ClickHouse host to connect to. If clickhouse.deploy is true, this will be set automatically based on the release name.
|
||||
host: ""
|
||||
# -- ClickHouse HTTP port to connect to.
|
||||
httpPort: 8123
|
||||
# -- ClickHouse native port to connect to.
|
||||
nativePort: 9000
|
||||
|
||||
# Authentication configuration
|
||||
auth:
|
||||
# -- Username for the ClickHouse user.
|
||||
username: default
|
||||
# -- Password for the ClickHouse user.
|
||||
password: ""
|
||||
# -- If you want to use an existing secret for the ClickHouse password, set the name of the secret here. (`clickhouse.auth.username` and `clickhouse.auth.password` will be ignored and picked up from this secret).
|
||||
existingSecret: ""
|
||||
# -- The key in the existing secret that contains the password.
|
||||
existingSecretKey: ""
|
||||
|
||||
# Migration configuration
|
||||
migration:
|
||||
# -- Migration URL (TCP protocol) for clickhouse
|
||||
url: ""
|
||||
# -- Set to true to establish SSL connection for migration
|
||||
ssl: false
|
||||
# -- Whether to run automatic ClickHouse migrations on startup
|
||||
autoMigrate: true
|
||||
|
||||
# -- Whether to run ClickHouse commands ON CLUSTER
|
||||
clusterEnabled: true
|
||||
|
||||
# -- Subchart specific settings
|
||||
shards: 1 # Fixed - Langfuse does not support sharding
|
||||
# -- Number of replicas to use for the ClickHouse cluster. 1 corresponds to a single, non-HA deployment.
|
||||
replicaCount: 3
|
||||
# -- The resources preset to use for the ClickHouse cluster.
|
||||
resourcesPreset: 2xlarge
|
||||
|
||||
# S3/MinIO Configuration
|
||||
s3:
|
||||
# -- Enable MinIO deployment (via Bitnami Helm Chart). If you want to use a custom BlobStorage, e.g. S3, set to false.
|
||||
deploy: true
|
||||
|
||||
# -- S3 bucket to use for all uploads. Can be overridden per upload type.
|
||||
bucket: ""
|
||||
# -- S3 region to use for all uploads. Can be overridden per upload type.
|
||||
region: "auto"
|
||||
# -- S3 endpoint to use for all uploads. Can be overridden per upload type.
|
||||
endpoint: ""
|
||||
# -- Whether to force path style on requests. Required for MinIO. Can be overridden per upload type.
|
||||
forcePathStyle: true
|
||||
# -- S3 accessKeyId to use for all uploads. Can be overridden per upload type.
|
||||
accessKeyId:
|
||||
value: ""
|
||||
secretKeyRef:
|
||||
name: ""
|
||||
key: ""
|
||||
# -- S3 secretAccessKey to use for all uploads. Can be overridden per upload type.
|
||||
secretAccessKey:
|
||||
value: ""
|
||||
secretKeyRef:
|
||||
name: ""
|
||||
key: ""
|
||||
|
||||
# Event Upload Configuration
|
||||
eventUpload:
|
||||
# -- S3 bucket to use for event uploads.
|
||||
bucket: ""
|
||||
# -- Prefix to use for event uploads within the bucket.
|
||||
prefix: ""
|
||||
# -- S3 region to use for event uploads.
|
||||
region: "auto"
|
||||
# -- S3 endpoint to use for event uploads.
|
||||
endpoint: ""
|
||||
# -- Whether to force path style on requests. Required for MinIO.
|
||||
forcePathStyle: true
|
||||
# -- S3 accessKeyId to use for event uploads.
|
||||
accessKeyId:
|
||||
value: ""
|
||||
secretKeyRef:
|
||||
name: ""
|
||||
key: ""
|
||||
# -- S3 secretAccessKey to use for event uploads.
|
||||
secretAccessKey:
|
||||
value: ""
|
||||
secretKeyRef:
|
||||
name: ""
|
||||
key: ""
|
||||
|
||||
# Batch Export Configuration
|
||||
batchExport:
|
||||
# -- Enable batch export.
|
||||
enabled: true
|
||||
# -- S3 bucket to use for batch exports.
|
||||
bucket: ""
|
||||
# -- Prefix to use for batch exports within the bucket.
|
||||
prefix: ""
|
||||
# -- S3 region to use for batch exports.
|
||||
region: ""
|
||||
# -- S3 endpoint to use for batch exports.
|
||||
endpoint: ""
|
||||
# -- Whether to force path style on requests. Required for MinIO.
|
||||
forcePathStyle: true
|
||||
# -- S3 accessKeyId to use for batch exports.
|
||||
accessKeyId:
|
||||
value: ""
|
||||
secretKeyRef:
|
||||
name: ""
|
||||
key: ""
|
||||
# -- S3 secretAccessKey to use for batch exports.
|
||||
secretAccessKey:
|
||||
value: ""
|
||||
secretKeyRef:
|
||||
name: ""
|
||||
key: ""
|
||||
|
||||
# Media Upload Configuration
|
||||
mediaUpload:
|
||||
# -- Enable media uploads.
|
||||
enabled: true
|
||||
# -- S3 bucket to use for media uploads.
|
||||
bucket: ""
|
||||
# -- Prefix to use for media uploads within the bucket.
|
||||
prefix: ""
|
||||
# -- S3 region to use for media uploads.
|
||||
region: ""
|
||||
# -- S3 endpoint to use for media uploads.
|
||||
endpoint: ""
|
||||
# -- Whether to force path style on requests. Required for MinIO.
|
||||
forcePathStyle: true
|
||||
# -- S3 accessKeyId to use for media uploads.
|
||||
accessKeyId:
|
||||
value: ""
|
||||
secretKeyRef:
|
||||
name: ""
|
||||
key: ""
|
||||
# -- S3 secretAccessKey to use for media uploads.
|
||||
secretAccessKey:
|
||||
value: ""
|
||||
secretKeyRef:
|
||||
name: ""
|
||||
key: ""
|
||||
# -- Maximum content length for media uploads. Defaults to 1GB.
|
||||
maxContentLength: 1000000000
|
||||
# -- Expiry time for download URLs. Defaults to 1 hour.
|
||||
downloadUrlExpirySeconds: 3600
|
||||
|
||||
# MinIO subchart specific settings
|
||||
defaultBuckets: langfuse
|
||||
auth:
|
||||
# -- root username
|
||||
rootUser: minio
|
||||
# -- Password for MinIO root user
|
||||
rootPassword: ""
|
||||
# -- If you want to use an existing secret for the root user password, set the name of the secret here. (`s3.auth.rootUser` and `s3.auth.rootPassword` will be ignored and picked up from this secret).
|
||||
existingSecret: ""
|
||||
# -- Key where the Minio root user password is being stored inside the existing secret `s3.auth.existingSecret`
|
||||
rootPasswordSecretKey: ""
|
||||
|
||||
# Additional manifests
|
||||
extraManifests: []
|
||||
Reference in New Issue
Block a user