Stéphane Tailland
6aad64903b
Point the OTLP exporter at Tempo instead of Jaeger. Enable the built-in /metrics endpoint by setting METRICS_SECRET: without it LibreChat answers 401 and exposes nothing. Prometheus scrapes it with a Bearer token from a dedicated job, since annotation-based discovery cannot carry credentials. A Kubernetes Secret is namespaced, so the same value must also exist as `librechat-metrics` in the observability namespace — one side verifies the token, the other presents it. secret.example.yaml documents the pairing; the real secret.yaml stays gitignored. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
31 lines
1.3 KiB
YAML
31 lines
1.3 KiB
YAML
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: librechat-secrets
|
|
namespace: librechat
|
|
type: Opaque
|
|
stringData:
|
|
MONGO_PASSWORD: "CHANGE_ME_MONGO_PASSWORD"
|
|
MONGO_URI: "mongodb://librechat:CHANGE_ME_MONGO_PASSWORD@mongodb:27017/LibreChat"
|
|
MEILI_MASTER_KEY: "CHANGE_ME_MEILI_MASTER_KEY_MIN_16_CHARS"
|
|
JWT_SECRET: "CHANGE_ME_JWT_SECRET_MIN_32_CHARS_RANDOM"
|
|
JWT_REFRESH_SECRET: "CHANGE_ME_JWT_REFRESH_SECRET_MIN_32_CHARS"
|
|
CREDS_KEY: "CHANGE_ME_32_BYTE_HEX_KEY_0000000000000000000000000000"
|
|
CREDS_IV: "CHANGE_ME_16BYTE"
|
|
# Optional: fill in your AI provider API keys
|
|
OPENAI_API_KEY: ""
|
|
ANTHROPIC_API_KEY: ""
|
|
# platform-llm proxy consumer key (kong-v2/platform-llm, consumer "librechat")
|
|
PLATFORM_LLM_LIBRECHAT_APIKEY: ""
|
|
LIBRECHAT_OIDC_CLIENT_SECRET: ""
|
|
OPENID_SESSION_SECRET: ""
|
|
|
|
# Enables the built-in Prometheus endpoint (/metrics on port 3080).
|
|
# Without it LibreChat answers 401. Prometheus scrapes it with
|
|
# `Authorization: Bearer <METRICS_SECRET>`: the SAME value must exist in the
|
|
# `librechat-metrics` secret of the observability namespace
|
|
# (see infra-observability/k8s/prometheus/). A Kubernetes Secret is
|
|
# namespaced, so the value has to be duplicated — one side verifies the
|
|
# token, the other presents it.
|
|
METRICS_SECRET: "CHANGE_ME_METRICS_SECRET_MIN_32_CHARS"
|