feat: 集成 Keycloak 认证 — 前后端 + K8s 配置

2026-06-15 17:30:57 +08:00
parent eeea55e9e4
commit 23f07dd3a7
13 changed files with 268 additions and 16 deletions
@@ -16,6 +16,10 @@ configMapGenerator:
      - DEEPSEEK_BASE_URL=https://api.deepseek.com
      - MINERU_PIPELINE=/app/mineru_mvp/pipeline.py
      - MINERU_PYTHON=/opt/venv/bin/python
+      - KEYCLOAK_SERVER_URL=https://keycloak.plfai.cn
+      - KEYCLOAK_REALM=plfai
+      - KEYCLOAK_CLIENT_ID=graphrag-backend
+      - KEYCLOAK_AUDIENCE=account

 secretGenerator:
  - name: graphrag-secrets
@@ -23,6 +27,7 @@ secretGenerator:
    literals:
      - DEEPSEEK_API_KEY=sk-prod-placeholder
      - MINERU_API_TOKEN=prod-placeholder
+      - KEYCLOAK_CLIENT_SECRET=prod-placeholder

 patches:
  - path: ingress.yaml