wbsong111
6290322f1b
- VM stack 10 charts: victoria-metrics-cluster/auth, victoria-logs-cluster, victoria-metrics-agent/alert, opentelemetry-collector, kube-state-metrics, prometheus-node-exporter, alertmanager, perses (JWT/OIDC, Infisical-ready) - ArgoCD ApplicationSet (syncWave) + per-chart dip-values overlays - doc/victoria-metrics-architecture.md, define-chart-resources updates - includes pending working-tree changes (mlflow, kubeflow, apisix, CLAUDE.md) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
21 lines
1.1 KiB
YAML
21 lines
1.1 KiB
YAML
# 환경 오버레이 — victoria-metrics-auth/0.33.0/custom-values.yaml 위에 적용
|
|
# Keycloak issuer만 환경별로 치환($VAR 문자열 치환). (Helm 배열 교체: config.users 전체를 재정의)
|
|
# 주의: {{.MetricsAccountID}}/{{.LogsAccountID}}는 vmauth 런타임 플레이스홀더이므로
|
|
# 그대로 보존되어야 한다($VAR 치환만 하고 Go 템플릿 렌더는 하지 않음).
|
|
|
|
config:
|
|
users:
|
|
- jwt:
|
|
oidc:
|
|
issuer: "$KEYCLOAK_URL/realms/$KEYCLOAK_REALM"
|
|
url_map:
|
|
- src_paths: ["/api/v1/.*"]
|
|
url_prefix: "http://vmcluster-victoria-metrics-cluster-vmselect.monitoring.svc.cluster.local:8481/select/{{.MetricsAccountID}}/prometheus"
|
|
- src_paths: ["/select/logsql/.*"]
|
|
url_prefix: "http://vlogs-victoria-logs-cluster-vlselect.monitoring.svc.cluster.local:9471"
|
|
headers:
|
|
- "AccountID: {{.LogsAccountID}}"
|
|
- "ProjectID: 0"
|
|
unauthorized_user:
|
|
url_prefix: "http://vmcluster-victoria-metrics-cluster-vmselect.monitoring.svc.cluster.local:8481/select/0/prometheus"
|