forked from xiaohei/taiji-AI-PAD
48 lines
1.5 KiB
YAML
48 lines
1.5 KiB
YAML
# Kubernetes Secrets配置
|
||
# 注意：实际部署时应使用Azure Key Vault或kubectl create secret命令
|
||
|
||
apiVersion: v1
|
||
kind: Secret
|
||
metadata:
|
||
name: taiji-secrets
|
||
namespace: taiji-ai
|
||
type: Opaque
|
||
stringData:
|
||
# 数据库连接字符串 - 测试环境使用 taiji 数据库
|
||
database-url: "postgresql://taiji:By%40123456.@taijipda.postgres.database.azure.com:5432/taiji?sslmode=require"
|
||
async-database-url: "postgresql+asyncpg://taiji:By%40123456.@taijipda.postgres.database.azure.com:5432/taiji"
|
||
|
||
# Redis连接字符串（Redis 已迁移到 taiji2026 实例）
|
||
redis-url: "rediss://:PzmWkM6CwfRrJTB1d2xLRxE9pzT7JKgvVAzCaEehmFE=@taiji2026.southeastasia.redis.azure.net:10000/0?ssl_cert_reqs=none"
|
||
|
||
# JWT密钥
|
||
jwt-secret: "CHANGE_THIS_SECRET_KEY_IN_PRODUCTION"
|
||
|
||
# 加密密钥
|
||
encryption-key: "CHANGE_THIS_ENCRYPTION_KEY"
|
||
|
||
# LiteLLM API密钥
|
||
litellm-api-key: "sk-taiji-master-key"
|
||
|
||
# Azure存储连接字符串
|
||
azure-storage-connection: "DefaultEndpointsProtocol=https;AccountName=YOUR_ACCOUNT;AccountKey=YOUR_KEY;EndpointSuffix=core.windows.net"
|
||
|
||
---
|
||
# ACR拉取密钥（使用Service Principal）
|
||
apiVersion: v1
|
||
kind: Secret
|
||
metadata:
|
||
name: acr-secret
|
||
namespace: taiji-ai
|
||
type: kubernetes.io/dockerconfigjson
|
||
data:
|
||
.dockerconfigjson: <BASE64_ENCODED_DOCKER_CONFIG>
|
||
# 生成方式：
|
||
# kubectl create secret docker-registry acr-secret \
|
||
# --docker-server=${ACR_NAME}.azurecr.io \
|
||
# --docker-username=${SP_APP_ID} \
|
||
# --docker-password=${SP_PASSWORD} \
|
||
# --namespace=taiji-ai
|
||
|
||
|