refactor: simplify env configuration workflow#8
Merged
Conversation
0a37bb8 to
f1b7fa4
Compare
…dling Consolidate per-service .env files into single .env per environment, reorder deploy dependencies, and improve error handling across scripts. - Consolidate config/dev/.env.* files into single config/dev/.env - Reorder deploy: namespace → postgres → langfuse → mlflow → langflow → app - Fix undeploy to reverse deploy dependency order - Allow user-settable LANGFUSE_INIT_USER_PASSWORD in .env - Auto-inject Langfuse API keys from secrets-dev.yaml into Langflow - Validate eval-based secret generation output (fail on empty) - Add openssl fallback for admin password generation - Make envsubst a hard requirement (remove eval fallback) - Improve rollout status and RBAC error reporting - Fix stale comments referencing removed per-service config vars Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
b167b1c to
22cc662
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
.env.*.examplefiles into 2 single.env.examplefiles (one per environment:config/local/andconfig/dev/)generate-config.shto never mutate user-edited.envfiles — auto-generated secrets go directly into deployment artifacts (k8s overlays, Helm secrets)config-setup,config-reset),-clustersuffix = cluster deployment (config-setup-cluster,config-reset-cluster)LANGFUSE_INIT_USER_PASSWORDto.env.exampleso users can set their own password (auto-generates if empty)deploy.shadmin-credentials to use the Langfuse password from user's.envdeploy-langflow.shnow reads API keys from generatedsecrets-dev.yamlinstead of expecting them in the user's.envTest plan
make config-reset && make config-setupcreatesconfig/local/.envfrom example and syncs tobackend/.envmake config-setup-clustercreatesconfig/dev/.envfrom examplemake config-generategenerates k8s overlay.envfiles andhelm/langfuse/secrets-dev.yamlmake deploydeploys all components in correct order (Langfuse before Langflow)config/dev/.envmake get-admin-credentialsshows correct Langfuse credentials🤖 Generated with Claude Code