mirror of
https://gitlab.com/deepcypher/dc-kc.git
synced 2026-01-27 11:12:08 +00:00
118 lines
3.4 KiB
YAML
118 lines
3.4 KiB
YAML
open-webui:
|
|
persistence:
|
|
enabled: true
|
|
size: 50Gi
|
|
image:
|
|
registry: ghcr.io
|
|
repository: open-webui/open-webui
|
|
tag: v0.6.26
|
|
env:
|
|
- name: OLLAMA_BASE_URL
|
|
value: "http://ollama.ollama:11434"
|
|
- name: WEBUI_SECRET_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: open-webui
|
|
key: WEBUI_SECRET_KEY
|
|
- name: JWT_EXPIRES_IN
|
|
value: "12h"
|
|
- name: GLOBAL_LOG_LEVEL # https://docs.openwebui.com/getting-started/advanced-topics/logging/#-global-logging-level-global_log_level
|
|
value: "DEBUG"
|
|
- name: ENABLE_VERSION_UPDATE_CHECK
|
|
value: "false"
|
|
- name: ENABLE_LOGIN_FORM
|
|
value: "false"
|
|
- name: ENABLE_SIGNUP
|
|
value: "false"
|
|
- name: ENABLE_OAUTH_SIGNUP
|
|
value: "true"
|
|
- name: OAUTH_MERGE_ACCOUNTS_BY_EMAIL
|
|
value: "true"
|
|
- name: OAUTH_CLIENT_ID # comes from secret
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: oidc-credentials
|
|
key: clientId
|
|
- name: OAUTH_CLIENT_SECRET # comes from secret
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: oidc-credentials
|
|
key: clientSecret
|
|
- name: OPENID_PROVIDER_URL # comes from configmap
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: oidc-urls
|
|
key: wellKnownURL
|
|
- name: OAUTH_PROVIDER_NAME
|
|
value: "Keycloak"
|
|
- name: OAUTH_SCOPES
|
|
value: "openid email profile roles"
|
|
- name: OAUTH_ROLES_CLAIM
|
|
value: "roles"
|
|
- name: OAUTH_ALLOWED_ROLES
|
|
value: "user"
|
|
- name: OAUTH_ADMIN_ROLES
|
|
value: "admin"
|
|
#resources:
|
|
# limits:
|
|
# memory: 1000Mi
|
|
# requests:
|
|
# cpu: 200m
|
|
netpol:
|
|
enabled: false
|
|
ingress:
|
|
## @param ingress.enabled [string] Enable ingress
|
|
enabled: true
|
|
## @param ingress.className [string] Ingress class
|
|
className: traefik
|
|
## @param ingress.annotations [object] Ingress annotations
|
|
annotations:
|
|
# kubernetes.io/ingress.class: nginx
|
|
# kubernetes.io/tls-acme: "true"
|
|
traefik.ingress.kubernetes.io/router.middlewares: traefik-headers@kubernetescrd
|
|
cert-manager.io/cluster-issuer: letsencrypt-dns
|
|
## @param ingress.hosts [array] Ingress hosts
|
|
hosts:
|
|
- host: chat.deepcypher.me
|
|
paths:
|
|
- path: /
|
|
pathType: ImplementationSpecific
|
|
## @param ingress.tls [array] Ingress TLS
|
|
tls:
|
|
- secretName: chat.deepcypher.me-tls
|
|
hosts:
|
|
- chat.deepcypher.me
|
|
resourcesEnabled: true
|
|
startupProbe:
|
|
httpGet:
|
|
path: /
|
|
port: http
|
|
failureThreshold: 50
|
|
timeoutSeconds: 2
|
|
# ensure running on amd64 as https://github.com/open-webui/open-webui/discussions/4530
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: kubernetes.io/arch
|
|
operator: In
|
|
values:
|
|
# - arm64
|
|
- amd64
|
|
|
|
oidc:
|
|
realm: deepcypher
|
|
|
|
environment:
|
|
name: unknown # not to be used for hard checks but to display to user
|
|
hardware: metal # to be used to enable on-prem specific features like ceph, cilium, etc
|
|
mode: production # to be used to configure backup movement and additional debugging features
|
|
revision: main # to be used to pull from different git branches
|
|
baseDomain: deepcypher.me # to be used to override default chart domains to configure environments
|
|
location:
|
|
name: unknown # not to be used for hard checks purely informational
|
|
contact:
|
|
name: George Onoufriou
|
|
email: noreply@deepcypher.me
|