wbsong111
6290322f1b
- VM stack 10 charts: victoria-metrics-cluster/auth, victoria-logs-cluster, victoria-metrics-agent/alert, opentelemetry-collector, kube-state-metrics, prometheus-node-exporter, alertmanager, perses (JWT/OIDC, Infisical-ready) - ArgoCD ApplicationSet (syncWave) + per-chart dip-values overlays - doc/victoria-metrics-architecture.md, define-chart-resources updates - includes pending working-tree changes (mlflow, kubeflow, apisix, CLAUDE.md) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
35 lines
1.2 KiB
YAML
35 lines
1.2 KiB
YAML
# 환경 오버레이 — perses/0.21.0/custom-values.yaml 위에 적용
|
|
# 환경별: OIDC issuer/redirect_uri, ingress(베이스에 없음 → 추가), client_secret(Infisical).
|
|
# dip-console이 $VAR를 Infisical/환경값으로 렌더해 값 repo에 커밋한다.
|
|
# (Helm 배열 교체: config.security.authentication.providers.oidc 전체 재정의)
|
|
|
|
config:
|
|
security:
|
|
enable_auth: true
|
|
authentication:
|
|
providers:
|
|
oidc:
|
|
- slug_id: keycloak
|
|
name: Keycloak
|
|
client_id: perses
|
|
client_secret: "$INFISICAL_PERSES_CLIENT_SECRET" # Infisical 출처(평문 커밋 금지)
|
|
issuer: "$KEYCLOAK_URL/realms/$KEYCLOAK_REALM"
|
|
redirect_uri: "https://perses.$DOMAIN/api/auth/providers/oidc/keycloak/callback"
|
|
scopes: [openid, profile, email]
|
|
|
|
# 외부 노출 (베이스 custom-values엔 ingress 없음)
|
|
ingress:
|
|
enabled: true
|
|
ingressClassName: "apisix"
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: "root-ca-issuer"
|
|
hosts:
|
|
- host: "perses.$DOMAIN"
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls:
|
|
- secretName: perses-tls
|
|
hosts:
|
|
- "perses.$DOMAIN"
|