oke-langfuse/terraform.tfvars.example at main · streamnsight/oke-langfuse · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
## Copyright © 2022-2023, Oracle and/or its affiliates.
## All rights reserved. The Universal Permissive License (UPL), Version 1.0 as shown at http://oss.oracle.com/licenses/upl

region       = "us-chicago-1"
tenancy_ocid = "ocid1.tenancy.oc1.."
oci_profile  = "DEFAULT"

## Compartments
# ideally it should be the same
vcn_compartment_id     = "ocid1.compartment.oc1.."
cluster_compartment_id = "ocid1.compartment.oc1.."
devops_compartment_id  = "ocid1.compartment.oc1.."

## Network
use_existing_vcn = false
vcn_cidr         = "10.0.0.0/16"

## Langfuse custom domain (optional)
# Recommended: pre-import the certificate in OCI Certificates Service and provide only the OCID.
# langfuse_use_custom_domain       = true
# langfuse_custom_domain_fqdn      = "langfuse.example.com"
# langfuse_enable_tls              = true
# langfuse_has_provided_certificate = true
# langfuse_certificate_source      = "existing_oci_certificate"
# langfuse_certificate_ocid        = "ocid1.certificate.oc1.."

# Let’s Encrypt HTTP01 option for custom domains.
# Create or update the DNS A record after deployment so the custom domain points to langfuse_load_balancer_ip.
# langfuse_use_custom_domain        = true
# langfuse_custom_domain_fqdn       = "langfuse.example.com"
# langfuse_enable_tls               = true
# langfuse_has_provided_certificate = false
# langfuse_letsencrypt_challenge_type = "http01"

# Convenience option: let the stack import PEM material into OCI Certificates Service.
# This passes private key material through Terraform and may retain it in state or stack history.
# langfuse_has_provided_certificate = true
# langfuse_certificate_source    = "import_certificate_pem"
# langfuse_certificate_pem       = <<EOT
# -----BEGIN CERTIFICATE-----
# ...
# -----END CERTIFICATE-----
# EOT
# langfuse_private_key_pem       = <<EOT
# -----BEGIN PRIVATE KEY-----
# ...
# -----END PRIVATE KEY-----
# EOT
# langfuse_certificate_chain_pem = <<EOT
# -----BEGIN CERTIFICATE-----
# ...
# -----END CERTIFICATE-----
# EOT

## Existing cluster mode (optional)
# use_existing_cluster = true
# cluster_ocid         = "ocid1.cluster.oc1.."
# enable_existing_cluster_cloud_init_preflight = true
# existing_cluster_cloud_init_required_markers = ["/usr/local/bin/docker_login.sh", "/usr/local/bin/docker-credential-helper-init.sh", "*/20 * * * * /bin/bash -lc"]

## Endpoint
is_endpoint_public = false

## Cluster
cluster_name        = "LangFuse Cluster"
is_enhanced_cluster = true
kubernetes_version  = "1.34.1"
ssh_public_key      = "ssh-rsa ..."
node_pool_count     = 1
# add_cluster_tag=
# cluster_tag=
# pods_cidr="10.1.0.0/16"
# services_cidr="10.2.0.0/16"
# np1_subnet=
np1_node_count = 3
np1_node_shape                = "VM.Standard.E5.Flex"
np1_operating_system          = "Oracle Linux"
np1_operating_system_version  = "8"
# np1_image_override          = true
# np1_image_id                = "ocid1.image.oc1.us-chicago-1.aaaaaaaasyjphzjohvvrttbw66amaxx6otldb26fvvn4nsogrvzsq2t6vama"
# np1_add_tag=
# np1_tag=
np1_ocpus                = 4
np1_memory_gb            = 16
np1_enable_autoscaler    = true
np1_autoscaler_min_nodes = 3
np1_autoscaler_max_nodes = 6
# np2_subnet=
# np2_create_new_subnet = true
# np2_node_count        = 1
# np2_node_shape                = "VM.Standard.E5.Flex"
# np2_operating_system          = "Oracle Linux"
# np2_operating_system_version  = "8"
# np2_image_override            = true
# np2_image_id                  = "ocid1.image.oc1.us-chicago-1.aaaaaaaasyjphzjohvvrttbw66amaxx6otldb26fvvn4nsogrvzsq2t6vama"
# A2 image
# np2_image_id                  = "ocid1.image.oc1.us-chicago-1.aaaaaaaaxfywtcajqgn25ma663ybfac35imks3zcoionaa75kkqdqrucp5ba"
# np2_ha = true
# np2_availability_domain="UWQV:US-ASHBURN-AD-2"
# np2_ocpus                = 1
# np2_memory_gb            = 16
# np2_enable_autoscaler    = true
# np2_autoscaler_min_nodes = 0
# np2_autoscaler_max_nodes = 3
# np2_add_tag=
# np2_tag=
# np3_subnet=
# np3_create_new_subnet = true
# np3_node_count        = 1
# np3_node_shape                = "VM.Standard.E3.Flex"
# np3_operating_system          = "Oracle Linux"
# np3_operating_system_version  = "8"
# np3_image_override            = true
# np3_image_id                  = "ocid1.image.oc1.us-chicago-1.aaaaaaaaxfywtcajqgn25ma663ybfac35imks3zcoionaa75kkqdqrucp5ba"
# np3_ocpus                     = 1
# np3_memory_gb                 = 4
# np3_enable_autoscaler         = false
# np3_autoscaler_min_nodes=0
# np3_autoscaler_max_nodes=3
# np3_add_tag=
# np3_tag=
# allow_deploy_private_lb = false
# private_lb_subnet=
allow_deploy_public_lb = true
# public_lb_subnet=

enable_secret_encryption = false
secrets_key_id           = null

# Image validation requires that images be signed. Keep it false
enable_image_validation = false
image_validation_key_id = null
# enable_pod_admission_controller=

enable_cert_manager = true
enable_metrics_server = true

cluster_autoscaler_use_workload_identity            = true
cluster_autoscaler_max_node_provision_time          = 25
cluster_autoscaler_scale_down_delay_after_add       = 1
cluster_autoscaler_scale_down_unneeded_time         = 1
cluster_autoscaler_unremovable_node_recheck_timeout = 1

create_bastion = true

# if you provide an IDCS app info, instead of creating it:
# idcs_domain_url = "https://idcs-9b803d4a3eb84cb7bafd19a1e67c0658.identity.oraclecloud.com:443"
# idcs_client_id     = "3fd90a71e23d4bc98015964a592e6003"
# idcs_client_secret = "idcscs-a48d2d43-9111-42d8-82de-f038141c66d0"
# idcs_app_id = "c59f924057a448ee9938712caad453fb"

# from customer client secrets
langfuse_s3_access_key = "xxxxxxxx"
langfuse_s3_secret_key = "xxxxxxxx"

postgresql_shape = "PostgreSQL.VM.Standard.E5.Flex"

# Redis/Valkey sizing for Langfuse queues.
# Increase this if worker/K8s metrics show:
# {"error":"OOM command not allowed when used memory > 'maxmemory'."}
# For production workloads, start at 16-32 GiB and scale up with ingestion volume.
redis_node_count  = "1"
redis_node_memory = "16"

# if creating the IDCS app with this template
create_idcs_app = true
# Resource Manager injects current_user_ocid automatically.
# For local Terraform runs, set current_user_ocid explicitly to auto-assign that user.
# current_user_ocid = "ocid1.user.oc1..exampleuniqueID"
# assign_current_user_to_idcs_app = true
identity_domain_id = "ocid1.domain.oc1..."

langfuse_helm_chart_version = "1.5.14"