Stéphane Tailland
6aad64903b
Point the OTLP exporter at Tempo instead of Jaeger. Enable the built-in /metrics endpoint by setting METRICS_SECRET: without it LibreChat answers 401 and exposes nothing. Prometheus scrapes it with a Bearer token from a dedicated job, since annotation-based discovery cannot carry credentials. A Kubernetes Secret is namespaced, so the same value must also exist as `librechat-metrics` in the observability namespace — one side verifies the token, the other presents it. secret.example.yaml documents the pairing; the real secret.yaml stays gitignored. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
35 lines
1.3 KiB
YAML
35 lines
1.3 KiB
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: librechat-config
|
|
namespace: librechat
|
|
data:
|
|
HOST: "0.0.0.0"
|
|
PORT: "3080"
|
|
DOMAIN_CLIENT: "https://librechat.sttlab.local"
|
|
DOMAIN_SERVER: "https://librechat.sttlab.local"
|
|
MEILI_HOST: "http://meilisearch:7700"
|
|
NODE_ENV: "production"
|
|
ALLOW_EMAIL_LOGIN: "true"
|
|
ALLOW_REGISTRATION: "true"
|
|
ALLOW_SOCIAL_LOGIN: "true"
|
|
ALLOW_SOCIAL_REGISTRATION: "true"
|
|
# Keycloak SSO, additive alongside email/password login (not replacing it
|
|
# — ALLOW_EMAIL_LOGIN stays true). OPENID_CLIENT_SECRET/OPENID_SESSION_SECRET
|
|
# are in librechat-secrets (see librechat/deployment.yaml).
|
|
OPENID_ISSUER: "https://keycloak.sttlab.local/realms/classic-models"
|
|
OPENID_CLIENT_ID: "librechat"
|
|
OPENID_CALLBACK_URL: "/oauth/openid/callback"
|
|
OPENID_SCOPE: "openid profile email librechat-audience"
|
|
OPENID_BUTTON_LABEL: "classic-models SSO"
|
|
# RP-initiated logout — without this, switching Keycloak users silently
|
|
# reuses the existing SSO session instead of re-prompting.
|
|
OPENID_USE_END_SESSION_ENDPOINT: "true"
|
|
SESSION_EXPIRY: "900000"
|
|
REFRESH_TOKEN_EXPIRY: "604800000"
|
|
DEBUG_LOGGING: "false"
|
|
OTEL_TRACING_ENABLED: "true"
|
|
OTEL_SERVICE_NAME: "librechat"
|
|
OTEL_EXPORTER_OTLP_ENDPOINT: "http://tempo.observability.svc.cluster.local:4318"
|
|
OTEL_TRACES_EXPORTER: "otlp"
|