forked from xiaohei/taiji-AI-PAD
71 lines
2.4 KiB
Plaintext
71 lines
2.4 KiB
Plaintext
# Kubernetes Secrets 模板
|
|
# 注意：这是一个模板文件，实际部署时请使用以下方式创建 Secret：
|
|
#
|
|
# 方式1: 使用 kubectl 命令
|
|
# kubectl create secret generic taiji-secrets \
|
|
# --from-literal=database-url="postgresql+asyncpg://..." \
|
|
# --from-literal=redis-url="rediss://..." \
|
|
# --namespace=taiji-ai
|
|
#
|
|
# 方式2: 使用 Azure Key Vault (推荐)
|
|
# 安装 Azure Key Vault Provider: https://azure.github.io/secrets-store-csi-driver-provider-azure/
|
|
#
|
|
# 方式3: 使用 sealed-secrets (推荐用于 GitOps)
|
|
# https://github.com/bitnami-labs/sealed-secrets
|
|
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: taiji-secrets
|
|
namespace: taiji-ai
|
|
type: Opaque
|
|
stringData:
|
|
# 数据库连接字符串 (Azure Database for PostgreSQL)
|
|
database-url: "postgresql+asyncpg://USER:PASSWORD@SERVER.postgres.database.azure.com:5432/DATABASE?sslmode=require"
|
|
async-database-url: "postgresql+asyncpg://USER:PASSWORD@SERVER.postgres.database.azure.com:5432/DATABASE?sslmode=require"
|
|
|
|
# Redis连接字符串 (Azure Cache for Redis)
|
|
redis-url: "rediss://:PASSWORD@SERVER.redis.cache.windows.net:6380/0?ssl_cert_reqs=required"
|
|
|
|
# JWT密钥
|
|
jwt-secret: "CHANGE_THIS_SECRET_KEY_IN_PRODUCTION_USE_STRONG_RANDOM_STRING"
|
|
|
|
# 加密密钥
|
|
encryption-key: "CHANGE_THIS_ENCRYPTION_KEY_USE_STRONG_RANDOM_STRING"
|
|
|
|
# LiteLLM API密钥
|
|
litellm-master-key: "sk-taiji-master-key"
|
|
litellm-api-key: "sk-taiji-master-key"
|
|
|
|
# OpenRouter API密钥
|
|
openrouter-api-key: "YOUR_OPENROUTER_API_KEY"
|
|
|
|
# RapidAPI配置
|
|
rapidapi-key: "YOUR_RAPIDAPI_KEY"
|
|
|
|
# Azure存储连接字符串 (可选)
|
|
azure-storage-connection-string: "DefaultEndpointsProtocol=https;AccountName=ACCOUNT;AccountKey=KEY;EndpointSuffix=core.windows.net"
|
|
|
|
---
|
|
# ACR (Azure Container Registry) 拉取密钥
|
|
# 创建方式：
|
|
# kubectl create secret docker-registry acr-secret \
|
|
# --docker-server=${ACR_NAME}.azurecr.io \
|
|
# --docker-username=${SP_APP_ID} \
|
|
# --docker-password=${SP_PASSWORD} \
|
|
# --namespace=taiji-ai
|
|
#
|
|
# 或者使用 AKS 与 ACR 集成（推荐）：
|
|
# az aks update -n <AKS_CLUSTER_NAME> -g <RESOURCE_GROUP> --attach-acr <ACR_NAME>
|
|
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: acr-secret
|
|
namespace: taiji-ai
|
|
type: kubernetes.io/dockerconfigjson
|
|
data:
|
|
.dockerconfigjson: <BASE64_ENCODED_DOCKER_CONFIG>
|
|
# 注意：实际使用时请使用上述命令创建，不要直接使用 base64 编码的配置
|
|
|