فهرست منبع

chore: 添加SSO统一认证平台docker-compose环境变量配置

- docker-compose.server.yaml 和 docker-compose.external-observability.yaml
  添加GPUSTACK_SSO_* 环境变量,支持统一认证平台SSO登录
- .gitignore 排除 config.yaml 防止敏感信息泄露
kinglee 1 هفته پیش
والد
کامیت
4faef8065f
3فایلهای تغییر یافته به همراه23 افزوده شده و 0 حذف شده
  1. 3 0
      .gitignore
  2. 10 0
      docker-compose/docker-compose.external-observability.yaml
  3. 10 0
      docker-compose/docker-compose.server.yaml

+ 3 - 0
.gitignore

@@ -159,6 +159,9 @@ __pycache__/
 */ui/
 *.ma
 
+# Local config with secrets
+config.yaml
+
 # macOS
 .DS_Store
 

+ 10 - 0
docker-compose/docker-compose.external-observability.yaml

@@ -28,6 +28,16 @@ services:
       GPUSTACK_DATABASE_URL: postgresql://gpustack:${POSTGRES_PASSWORD:-gpustack}@postgres:5432/gpustack
       GPUSTACK_DISABLE_BUILTIN_OBSERVABILITY: "true"
       GPUSTACK_GRAFANA_URL: ${GPUSTACK_GRAFANA_URL:-}
+      # SSO 统一认证平台配置
+      GPUSTACK_SSO_BASE_URL: http://192.168.92.61:8200
+      GPUSTACK_SSO_CLIENT_ID: ${GPUSTACK_SSO_CLIENT_ID}
+      GPUSTACK_SSO_CLIENT_SECRET: ${GPUSTACK_SSO_CLIENT_SECRET}
+      GPUSTACK_SSO_REDIRECT_URI: http://192.168.92.151:8080/auth/callback
+      GPUSTACK_SSO_FRONTEND_URL: http://192.168.92.151:8080
+      GPUSTACK_SSO_LOGOUT_REDIRECT_URL: http://192.168.92.61:9200/login
+      # CORS
+      GPUSTACK_ENABLE_CORS: "true"
+      GPUSTACK_ALLOW_ORIGINS: '["http://192.168.92.151:8080"]'
     volumes:
       - maas-base-data:/var/lib/gpustack
     ports:

+ 10 - 0
docker-compose/docker-compose.server.yaml

@@ -27,6 +27,16 @@ services:
     entrypoint: ["/usr/bin/entrypoint.sh", "--gateway-mode", "embedded"]
     environment:
       GPUSTACK_DATABASE_URL: postgresql://gpustack:${POSTGRES_PASSWORD:-gpustack}@postgres:5432/gpustack
+      # SSO 统一认证平台配置
+      GPUSTACK_SSO_BASE_URL: http://192.168.92.61:8200
+      GPUSTACK_SSO_CLIENT_ID: ${GPUSTACK_SSO_CLIENT_ID}
+      GPUSTACK_SSO_CLIENT_SECRET: ${GPUSTACK_SSO_CLIENT_SECRET}
+      GPUSTACK_SSO_REDIRECT_URI: http://192.168.92.151:8080/auth/callback
+      GPUSTACK_SSO_FRONTEND_URL: http://192.168.92.151:8080
+      GPUSTACK_SSO_LOGOUT_REDIRECT_URL: http://192.168.92.61:9200/login
+      # CORS
+      GPUSTACK_ENABLE_CORS: "true"
+      GPUSTACK_ALLOW_ORIGINS: '["http://192.168.92.151:8080"]'
     volumes:
       - maas-base-data:/var/lib/gpustack
     ports: