{"id":101395,"date":"2026-09-06T19:09:02","date_gmt":"2026-09-06T11:09:02","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/101395.html"},"modified":"2026-09-06T19:09:02","modified_gmt":"2026-09-06T11:09:02","slug":"%e5%ae%9e%e6%88%98%ef%bc%9a%e5%9f%ba%e4%ba%8e-k3s-argocd-gitops-%e5%9c%a8%e6%9c%ac%e5%9c%b0-nuc-%e8%90%bd%e5%9c%b0-minio-%e5%af%b9%e8%b1%a1%e5%ad%98%e5%82%a8%e5%b9%b6%e9%80%9a%e8%bf%87%e5%85%ac","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/101395.html","title":{"rendered":"\u5b9e\u6218\uff1a\u57fa\u4e8e K3s + ArgoCD GitOps \u5728\u672c\u5730 NUC \u843d\u5730 MinIO \u5bf9\u8c61\u5b58\u50a8\u5e76\u901a\u8fc7\u516c\u7f51 SSO \u5b89\u5168\u8bbf\u95ee"},"content":{"rendered":"<h3>1. \u80cc\u666f\u4e0e\u67b6\u6784\u9700\u6c42<\/h3>\n<p>\u5728\u6784\u5efa\u4f01\u4e1a\u7ea7\u5927\u6a21\u578b\u7f51\u5173\u4e0e\u4e2d\u95f4\u4ef6&#xff08;\u5982 LiteLLM Proxy&#xff09;\u7684\u8fc7\u7a0b\u4e2d&#xff0c;\u9762\u4e34\u7740\u4e00\u4e2a\u6838\u5fc3\u77db\u76fe&#xff1a;<\/p>\n<ul>\n<li>\u70ed\u6570\u636e\u4e0e\u6307\u6807\u5206\u6790&#xff1a;\u8c03\u7528\u8017\u65f6\u3001Token \u8ba1\u91cf\u3001USD\/CNY \u6263\u8d39\u3001\u6a21\u578b\u8def\u7531\u8f68\u8ff9\u7b49\u7ed3\u6784\u5316\u6570\u636e&#xff0c;\u9002\u5408\u5b58\u653e\u5728\u6258\u7ba1\u5173\u7cfb\u578b\u6570\u636e\u5e93&#xff08;\u5982 OCI MySQL \/ PostgreSQL&#xff09;\u4e2d&#xff0c;\u4fdd\u8bc1\u62a5\u8868\u67e5\u8be2\u79d2\u7ea7\u54cd\u5e94&#xff1b;<\/li>\n<li>\u51b7\u6570\u636e\u4e0e\u957f\u6587\u672c Payload&#xff1a;Prompt \u8f93\u5165\u548c Response \u8f93\u51fa\u52a8\u8f84\u6570\u4e07\u751a\u81f3\u6570\u5341\u4e07 Token&#xff0c;\u5982\u679c\u4e00\u80a1\u8111\u585e\u8fdb MySQL \u7684 LONGTEXT\/JSON \u5b57\u6bb5&#xff0c;\u4f1a\u8fc5\u901f\u6324\u5360 InnoDB Buffer Pool&#xff0c;\u5bfc\u81f4\u4e3b\u952e\u4e0e\u7d22\u5f15\u547d\u4e2d\u7387\u65ad\u5d16\u5f0f\u4e0b\u8dcc&#xff0c;\u4e14\u6570\u636e\u5e93\u5feb\u7167\u5907\u4efd\u4e0e\u8fc1\u79fb\u6210\u672c\u6781\u9ad8\u3002<\/li>\n<\/ul>\n<p>\u4e3a\u4e86\u5b9e\u73b0\u51b7\u70ed\u6570\u636e\u7269\u7406\u9694\u79bb&#xff0c;\u9700\u8981\u4e00\u5957\u5bb9\u91cf\u5927\u3001\u6210\u672c\u4e3a\u96f6\u3001\u9690\u79c1\u7edd\u5bf9\u53ef\u63a7\u7684\u5bf9\u8c61\u5b58\u50a8\u65b9\u6848\u3002<br \/>\n<img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260906110859-6a9d49cb9d839.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<h4>\u6838\u5fc3\u8d44\u4ea7\u4e0e\u62d3\u6251<\/h4>\n<ul>\n<li>\u7269\u7406\u786c\u4ef6&#xff1a;\u672c\u5730 Intel NUC \u8ff7\u4f60\u4e3b\u673a&#xff08;\u63a5\u5165 Tailscale \u5f02\u5730\u7ec4\u7f51&#xff0c;\u4f5c\u4e3a\u591a\u4e91 K3s \u4e1a\u52a1\u96c6\u7fa4\u7684 Worker \u8282\u70b9&#xff09;&#xff1b;<\/li>\n<li>\u5b58\u50a8\u7a7a\u95f4&#xff1a;NUC \u7269\u7406\u673a\u4e0a 800GB&#043; \u6781\u901f NVMe SSD \u7a7a\u95f4&#xff1b;<\/li>\n<li>GitOps \u63a7\u5236\u9762&#xff1a;\u963f\u91cc\u4e91 Master \u8282\u70b9\u6258\u7ba1\u7684 ArgoCD&#xff0c;\u5168\u58f0\u660e\u5f0f\u540c\u6b65\u591a\u4e91\u96c6\u7fa4\u5de5\u4f5c\u8d1f\u8f7d&#xff1b;<\/li>\n<li>\u516c\u7f51\u5165\u53e3\u4e0e\u5b89\u5168&#xff1a;Cloudflare \u8fb9\u7f18 CDN&#xff08;\u514d\u8d39 Universal SSL&#xff09; &#043; Kong Gateway API \u7f51\u5173&#xff1b;<\/li>\n<li>\u7edf\u4e00\u8eab\u4efd\u8ba4\u8bc1&#xff1a;Logto Cloud &#043; GitHub OAuth \u5b9e\u73b0\u5355\u70b9\u767b\u5f55&#xff08;SSO&#xff09;\u3002<\/li>\n<\/ul>\n<p>\u6574\u4f53\u6570\u636e\u4e0e\u6d41\u91cf\u6d41\u5411\u5982\u4e0b&#xff1a;<\/p>\n<p>[\u516c\u7f51\u6d4f\u89c8\u5668 \/ \u7ec8\u7aef]<br \/>\n       \u2502<br \/>\n       \u25bc (HTTPS 443 \/ Cloudflare Edge SSL)<br \/>\n[Cloudflare CDN Proxy (*.jppwl.asia)]<br \/>\n       \u2502<br \/>\n       \u25bc (\u516c\u7f51\u6d41\u91cf\u6c47\u805a)<br \/>\n[Kong Gateway (K3s tencent-dp1-cluster)]<br \/>\n       \u2502<br \/>\n       \u25bc (K3s Flannel VXLAN \u5185\u90e8\u8def\u7531)<br \/>\n[MinIO Pod (\u56fa\u5b9a\u8c03\u5ea6\u5728 NUC Worker \u8282\u70b9)] \u25c4\u2500\u2500\u2500 OIDC \u8ba4\u8bc1 \u2500\u2500\u2500\u25ba [Logto Cloud (sodaxw.logto.app)]<br \/>\n       \u2502<br \/>\n       \u25bc (hostPath \u6302\u8f7d)<br \/>\n[NUC \u672c\u5730\u7269\u7406\u8def\u5f84: \/home\/data\/litellm_payloads (800GB NVMe)]<\/p>\n<hr \/>\n<h3>2. \u7b2c\u4e00\u6b65&#xff1a;NUC \u7269\u7406\u5bbf\u4e3b\u673a\u5b58\u50a8\u51c6\u5907<\/h3>\n<p>\u5728 Kubernetes \u4e2d\u4f7f\u7528\u672c\u5730\u5b58\u50a8\u65f6&#xff0c;\u6700\u5bb9\u6613\u8e29\u7684\u5751\u662f\u6302\u8f7d\u9519\u7cfb\u7edf\u5206\u533a\u3002<\/p>\n<p>\u901a\u8fc7 SSH \u8fdb\u5165 NUC \u67e5\u770b\u78c1\u76d8\u6302\u8f7d\u60c5\u51b5&#xff1a;<\/p>\n<p>$ <span class=\"token function\">df<\/span> <span class=\"token parameter variable\">-h<\/span><br \/>\nFilesystem      Size  Used Avail Use% Mounted on<br \/>\n\/dev\/nvme0n1p2   39G  <span class=\"token number\">9<\/span>.5G   27G  <span class=\"token number\">27<\/span>% \/       <span class=\"token operator\">&lt;<\/span>&#8212; \u6839\u76ee\u5f55\u4ec5\u5269 27G&#xff0c;\u6781\u6613\u8dd1\u6ee1<br \/>\n\/dev\/nvme0n1p4  845G  <span class=\"token number\">2<\/span>.1M  802G   <span class=\"token number\">1<\/span>% \/home   <span class=\"token operator\">&lt;<\/span>&#8212; 800G NVMe \u7a7a\u95f2\u5b58\u50a8<\/p>\n<p>\u4e3a\u4e86\u907f\u514d\u5927\u6587\u672c\u5bf9\u8c61\u628a\u6839\u76ee\u5f55\u5199\u6ee1\u5bfc\u81f4 K3s \u89e6\u53d1 DiskPressure \u9a71\u9010 Pod&#xff0c;\u771f\u5b9e\u6570\u636e\u5fc5\u987b\u843d\u5728 \/home \u5206\u533a\u4e0b\u3002<\/p>\n<h4>\u76ee\u5f55\u521b\u5efa\u4e0e\u6743\u9650\u89c4\u8303<\/h4>\n<p>MinIO \u5b98\u65b9\u5bb9\u5668\u9ed8\u8ba4\u8fd0\u884c\u5728\u975e root \u7528\u6237&#xff08;UID 1000&#xff09;\u3002\u9700\u8981\u5728\u5bbf\u4e3b\u673a\u63d0\u524d\u5efa\u597d\u76ee\u5f55\u5e76\u8d4b\u6743&#xff1a;<\/p>\n<p><span class=\"token comment\"># 1. \u5728\u5927\u5bb9\u91cf\u5206\u533a\u521b\u5efa\u4e13\u7528\u5b58\u50a8\u76ee\u5f55<\/span><br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">mkdir<\/span> <span class=\"token parameter variable\">-p<\/span> \/home\/data\/litellm_payloads<\/p>\n<p><span class=\"token comment\"># 2. \u4fee\u6539\u5c5e\u4e3b\u5c5e\u7ec4\u4e3a 1000:1000&#xff0c;\u8d4b\u4e88\u8bfb\u5199\u6743\u9650<\/span><br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">chown<\/span> <span class=\"token parameter variable\">-R<\/span> <span class=\"token number\">1000<\/span>:1000 \/home\/data<br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">chmod<\/span> <span class=\"token parameter variable\">-R<\/span> <span class=\"token number\">775<\/span> \/home\/data<\/p>\n<p><span class=\"token comment\"># 3. \u5efa\u7acb\u8f6f\u94fe\u63a5&#xff0c;\u4fdd\u6301\u5168\u5c40 \/data \u8def\u5f84\u4e00\u81f4\u6027<\/span><br \/>\n<span class=\"token function\">sudo<\/span> <span class=\"token function\">ln<\/span> <span class=\"token parameter variable\">-sfn<\/span> \/home\/data \/data<\/p>\n<hr \/>\n<h3>3. \u7b2c\u4e8c\u6b65&#xff1a;ArgoCD GitOps \u58f0\u660e\u5f0f\u4ea4\u4ed8 MinIO<\/h3>\n<p>\u9075\u5faa\u7eaf\u6b63\u7684 GitOps \u8303\u5f0f&#xff0c;\u4e0d\u4f7f\u7528\u4efb\u4f55\u624b\u52a8 kubectl run \u6216\u88f8 Docker \u547d\u4ee4&#xff0c;\u6240\u6709\u8d44\u6e90\u5747\u901a\u8fc7 Git \u4ed3\u5e93\u7ba1\u7406\u3002<\/p>\n<h4>3.1 \u7f16\u5199 Kubernetes \u6e05\u5355 (infrastructure\/minio\/minio.yaml)<\/h4>\n<p>\u6838\u5fc3\u8981\u70b9&#xff1a;<\/p>\n<li>\u8c03\u5ea6\u7ea6\u675f&#xff1a;\u4f7f\u7528 nodeSelector: kubernetes.io\/hostname: nuc \u5c06 Pod \u7262\u7262\u9489\u6b7b\u5728 NUC \u7269\u7406\u673a&#xff1b;<\/li>\n<li>\u672c\u5730\u5b58\u50a8\u6302\u8f7d&#xff1a;\u4f7f\u7528 hostPath \u76f4\u63a5\u6620\u5c04\u5bbf\u4e3b\u673a \/data\/litellm_payloads&#xff1b;<\/li>\n<li>\u670d\u52a1\u4e0e\u7f51\u5173&#xff1a;\u5206\u522b\u66b4\u9732 9000&#xff08;S3 API \u4f20\u8f93&#xff09;\u4e0e 9001&#xff08;Web Console \u7ba1\u7406\u540e\u53f0&#xff09;\u3002<\/li>\n<p><span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Namespace<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n<span class=\"token punctuation\">&#8212;<\/span><br \/>\n<span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Secret<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<span class=\"token punctuation\">&#8211;<\/span>secret<br \/>\n  <span class=\"token key atrule\">namespace<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n<span class=\"token key atrule\">type<\/span><span class=\"token punctuation\">:<\/span> Opaque<br \/>\n<span class=\"token key atrule\">stringData<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">MINIO_ROOT_USER<\/span><span class=\"token punctuation\">:<\/span> litellm_admin<br \/>\n  <span class=\"token key atrule\">MINIO_ROOT_PASSWORD<\/span><span class=\"token punctuation\">:<\/span> CHANGE_ME<br \/>\n  <span class=\"token key atrule\">MINIO_IDENTITY_OPENID_CLIENT_SECRET<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;YOUR_LOGTO_OIDC_SECRET&#034;<\/span><br \/>\n<span class=\"token punctuation\">&#8212;<\/span><br \/>\n<span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> apps\/v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Deployment<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n  <span class=\"token key atrule\">namespace<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">app<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">replicas<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">1<\/span><br \/>\n  <span class=\"token key atrule\">strategy<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">type<\/span><span class=\"token punctuation\">:<\/span> Recreate<br \/>\n  <span class=\"token key atrule\">selector<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">matchLabels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">app<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n  <span class=\"token key atrule\">template<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token key atrule\">app<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n    <span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">nodeSelector<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token key atrule\">kubernetes.io\/hostname<\/span><span class=\"token punctuation\">:<\/span> nuc <span class=\"token comment\"># \u9501\u5b9a NUC \u8282\u70b9<\/span><br \/>\n      <span class=\"token key atrule\">containers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n          <span class=\"token key atrule\">image<\/span><span class=\"token punctuation\">:<\/span> quay.io\/minio\/minio<span class=\"token punctuation\">:<\/span>RELEASE.2024<span class=\"token punctuation\">&#8211;<\/span>08<span class=\"token punctuation\">&#8211;<\/span>29T01<span class=\"token punctuation\">&#8211;<\/span>40<span class=\"token punctuation\">&#8211;<\/span>52Z<br \/>\n          <span class=\"token key atrule\">command<\/span><span class=\"token punctuation\">:<\/span><br \/>\n            <span class=\"token punctuation\">&#8211;<\/span> \/bin\/sh<br \/>\n            <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token punctuation\">&#8211;<\/span>ce<br \/>\n            <span class=\"token punctuation\">&#8211;<\/span> minio server \/data <span class=\"token punctuation\">&#8211;<\/span><span class=\"token punctuation\">&#8211;<\/span>console<span class=\"token punctuation\">&#8211;<\/span>address &#034;<span class=\"token punctuation\">:<\/span>9001&#034;<br \/>\n          <span class=\"token key atrule\">env<\/span><span class=\"token punctuation\">:<\/span><br \/>\n            <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> MINIO_ROOT_USER<br \/>\n              <span class=\"token key atrule\">valueFrom<\/span><span class=\"token punctuation\">:<\/span><br \/>\n                <span class=\"token key atrule\">secretKeyRef<\/span><span class=\"token punctuation\">:<\/span><br \/>\n                  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<span class=\"token punctuation\">&#8211;<\/span>secret<br \/>\n                  <span class=\"token key atrule\">key<\/span><span class=\"token punctuation\">:<\/span> MINIO_ROOT_USER<br \/>\n            <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> MINIO_ROOT_PASSWORD<br \/>\n              <span class=\"token key atrule\">valueFrom<\/span><span class=\"token punctuation\">:<\/span><br \/>\n                <span class=\"token key atrule\">secretKeyRef<\/span><span class=\"token punctuation\">:<\/span><br \/>\n                  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<span class=\"token punctuation\">&#8211;<\/span>secret<br \/>\n                  <span class=\"token key atrule\">key<\/span><span class=\"token punctuation\">:<\/span> MINIO_ROOT_PASSWORD<br \/>\n            <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> MINIO_BROWSER_REDIRECT_URL<br \/>\n              <span class=\"token key atrule\">value<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;https:\/\/minio.jppwl.asia&#034;<\/span><br \/>\n          <span class=\"token key atrule\">ports<\/span><span class=\"token punctuation\">:<\/span><br \/>\n            <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> s3<span class=\"token punctuation\">&#8211;<\/span>api<br \/>\n              <span class=\"token key atrule\">containerPort<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">9000<\/span><br \/>\n            <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<span class=\"token punctuation\">&#8211;<\/span>console<br \/>\n              <span class=\"token key atrule\">containerPort<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">9001<\/span><br \/>\n          <span class=\"token key atrule\">volumeMounts<\/span><span class=\"token punctuation\">:<\/span><br \/>\n            <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<span class=\"token punctuation\">&#8211;<\/span>storage<br \/>\n              <span class=\"token key atrule\">mountPath<\/span><span class=\"token punctuation\">:<\/span> \/data<br \/>\n          <span class=\"token key atrule\">resources<\/span><span class=\"token punctuation\">:<\/span><br \/>\n            <span class=\"token key atrule\">requests<\/span><span class=\"token punctuation\">:<\/span><br \/>\n              <span class=\"token key atrule\">cpu<\/span><span class=\"token punctuation\">:<\/span> 100m<br \/>\n              <span class=\"token key atrule\">memory<\/span><span class=\"token punctuation\">:<\/span> 128Mi<br \/>\n            <span class=\"token key atrule\">limits<\/span><span class=\"token punctuation\">:<\/span><br \/>\n              <span class=\"token key atrule\">cpu<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;1&#034;<\/span><br \/>\n              <span class=\"token key atrule\">memory<\/span><span class=\"token punctuation\">:<\/span> 1Gi<br \/>\n          <span class=\"token key atrule\">livenessProbe<\/span><span class=\"token punctuation\">:<\/span><br \/>\n            <span class=\"token key atrule\">httpGet<\/span><span class=\"token punctuation\">:<\/span><br \/>\n              <span class=\"token key atrule\">path<\/span><span class=\"token punctuation\">:<\/span> \/minio\/health\/live<br \/>\n              <span class=\"token key atrule\">port<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">9000<\/span><br \/>\n            <span class=\"token key atrule\">initialDelaySeconds<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">15<\/span><br \/>\n            <span class=\"token key atrule\">periodSeconds<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">20<\/span><br \/>\n          <span class=\"token key atrule\">readinessProbe<\/span><span class=\"token punctuation\">:<\/span><br \/>\n            <span class=\"token key atrule\">httpGet<\/span><span class=\"token punctuation\">:<\/span><br \/>\n              <span class=\"token key atrule\">path<\/span><span class=\"token punctuation\">:<\/span> \/minio\/health\/ready<br \/>\n              <span class=\"token key atrule\">port<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">9000<\/span><br \/>\n            <span class=\"token key atrule\">initialDelaySeconds<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">10<\/span><br \/>\n            <span class=\"token key atrule\">periodSeconds<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">15<\/span><br \/>\n      <span class=\"token key atrule\">volumes<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<span class=\"token punctuation\">&#8211;<\/span>storage<br \/>\n          <span class=\"token key atrule\">hostPath<\/span><span class=\"token punctuation\">:<\/span><br \/>\n            <span class=\"token key atrule\">path<\/span><span class=\"token punctuation\">:<\/span> \/data\/litellm_payloads<br \/>\n            <span class=\"token key atrule\">type<\/span><span class=\"token punctuation\">:<\/span> DirectoryOrCreate<br \/>\n<span class=\"token punctuation\">&#8212;<\/span><br \/>\n<span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Service<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n  <span class=\"token key atrule\">namespace<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">app<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">type<\/span><span class=\"token punctuation\">:<\/span> ClusterIP<br \/>\n  <span class=\"token key atrule\">selector<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">app<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n  <span class=\"token key atrule\">ports<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> s3<span class=\"token punctuation\">&#8211;<\/span>api<br \/>\n      <span class=\"token key atrule\">port<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">9000<\/span><br \/>\n      <span class=\"token key atrule\">targetPort<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">9000<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> web<span class=\"token punctuation\">&#8211;<\/span>console<br \/>\n      <span class=\"token key atrule\">port<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">9001<\/span><br \/>\n      <span class=\"token key atrule\">targetPort<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">9001<\/span><\/p>\n<h4>3.2 \u6ce8\u518c ArgoCD Application (argocd-apps\/minio-app.yaml)<\/h4>\n<p><span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> argoproj.io\/v1alpha1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Application<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n  <span class=\"token key atrule\">namespace<\/span><span class=\"token punctuation\">:<\/span> argocd<br \/>\n  <span class=\"token key atrule\">annotations<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">argocd.argoproj.io\/sync-wave<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;2&#034;<\/span><br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">project<\/span><span class=\"token punctuation\">:<\/span> default<br \/>\n  <span class=\"token key atrule\">ignoreDifferences<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">group<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;&#034;<\/span><br \/>\n      <span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Secret<br \/>\n      <span class=\"token key atrule\">jsonPointers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token punctuation\">&#8211;<\/span> \/data<br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">group<\/span><span class=\"token punctuation\">:<\/span> gateway.networking.k8s.io<br \/>\n      <span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> HTTPRoute<br \/>\n      <span class=\"token key atrule\">jsonPointers<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token punctuation\">&#8211;<\/span> \/spec\/parentRefs\/0\/group<br \/>\n        <span class=\"token punctuation\">&#8211;<\/span> \/spec\/parentRefs\/0\/kind<br \/>\n        <span class=\"token punctuation\">&#8211;<\/span> \/status<br \/>\n  <span class=\"token key atrule\">source<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">repoURL<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#039;https:\/\/github.com\/nvd11\/my-argocd-manifests.git&#039;<\/span><br \/>\n    <span class=\"token key atrule\">path<\/span><span class=\"token punctuation\">:<\/span> infrastructure\/minio<br \/>\n    <span class=\"token key atrule\">targetRevision<\/span><span class=\"token punctuation\">:<\/span> HEAD<br \/>\n  <span class=\"token key atrule\">destination<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#039;tencent-dp1-cluster&#039;<\/span><br \/>\n    <span class=\"token key atrule\">namespace<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n  <span class=\"token key atrule\">syncPolicy<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">automated<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">prune<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token boolean important\">true<\/span><br \/>\n      <span class=\"token key atrule\">selfHeal<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token boolean important\">true<\/span><br \/>\n    <span class=\"token key atrule\">syncOptions<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token punctuation\">&#8211;<\/span> CreateNamespace&#061;true<\/p>\n<p>\u63d0\u4ea4\u4ee3\u7801\u81f3 Git \u540e&#xff0c;ArgoCD \u81ea\u52a8\u53d1\u73b0\u5e76\u5b8c\u6210\u72b6\u6001\u5bf9\u9f50&#xff0c;MinIO Pod \u5728 NUC \u8282\u70b9\u4e0a\u8fdb\u5165 1\/1 Running \u72b6\u6001\u3002<\/p>\n<hr \/>\n<h3>4. \u7b2c\u4e09\u6b65&#xff1a;\u516c\u7f51\u89e3\u6790\u4e0e Kong Gateway API \u8def\u7531\u63a5\u5165<\/h3>\n<p>\u4e3a\u4e86\u8ba9\u5c40\u57df\u7f51\u5185\u7684 MinIO \u5177\u5907\u516c\u7f51\u8bbf\u95ee\u80fd\u529b&#xff0c;\u540c\u65f6\u5b9e\u73b0\u5168\u7ad9 HTTPS \u7ec8\u7ed3\u4e0e\u6e90\u7ad9 IP \u9690\u85cf&#xff0c;\u91c7\u7528 Cloudflare &#043; Kong Gateway \u67b6\u6784\u3002<\/p>\n<h4>4.1 Cloudflare DNS \u914d\u7f6e<\/h4>\n<p>\u5728 Cloudflare \u6dfb\u52a0\u4e00\u6761 A \u8bb0\u5f55&#xff0c;\u5f00\u542f Proxy&#xff08;\u5c0f\u9ec4\u4e91&#xff09;\u6a21\u5f0f&#xff1a;<\/p>\n<ul>\n<li>Name&#xff1a;minio.jppwl.asia<\/li>\n<li>Target IP&#xff1a;\u96c6\u7fa4\u516c\u7f51\u5165\u53e3 IP&#xff08;Kong Ingress \u6240\u5728\u8282\u70b9&#xff09;<\/li>\n<li>Proxied&#xff1a;true&#xff08;\u4eab\u53d7 Cloudflare \u514d\u8d39 Universal Edge SSL&#xff09;<\/li>\n<\/ul>\n<h4>4.2 \u914d\u7f6e Kubernetes Gateway API HTTPRoute<\/h4>\n<p>\u5728 infrastructure\/minio\/minio.yaml \u4e2d\u8ffd\u52a0 HTTPRoute \u5b9a\u4e49&#xff0c;\u5c06\u516c\u7f51\u5bf9 minio.jppwl.asia \u7684 HTTP\/HTTPS \u6d41\u91cf\u7cbe\u51c6\u8f6c\u53d1\u81f3 MinIO \u7684 9001 Web \u63a7\u5236\u53f0\u7aef\u53e3&#xff1a;<\/p>\n<p><span class=\"token key atrule\">apiVersion<\/span><span class=\"token punctuation\">:<\/span> gateway.networking.k8s.io\/v1<br \/>\n<span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> HTTPRoute<br \/>\n<span class=\"token key atrule\">metadata<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<span class=\"token punctuation\">&#8211;<\/span>console<span class=\"token punctuation\">&#8211;<\/span>route<br \/>\n  <span class=\"token key atrule\">namespace<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n  <span class=\"token key atrule\">labels<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token key atrule\">app<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n<span class=\"token key atrule\">spec<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token key atrule\">parentRefs<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">group<\/span><span class=\"token punctuation\">:<\/span> gateway.networking.k8s.io<br \/>\n      <span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Gateway<br \/>\n      <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> kong<span class=\"token punctuation\">&#8211;<\/span>main<span class=\"token punctuation\">&#8211;<\/span>gateway<br \/>\n      <span class=\"token key atrule\">namespace<\/span><span class=\"token punctuation\">:<\/span> default<br \/>\n  <span class=\"token key atrule\">hostnames<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token string\">&#034;minio.jppwl.asia&#034;<\/span><br \/>\n  <span class=\"token key atrule\">rules<\/span><span class=\"token punctuation\">:<\/span><br \/>\n    <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">backendRefs<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">group<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;&#034;<\/span><br \/>\n          <span class=\"token key atrule\">kind<\/span><span class=\"token punctuation\">:<\/span> Service<br \/>\n          <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<br \/>\n          <span class=\"token key atrule\">port<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">9001<\/span><br \/>\n          <span class=\"token key atrule\">weight<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token number\">1<\/span><br \/>\n      <span class=\"token key atrule\">matches<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">path<\/span><span class=\"token punctuation\">:<\/span><br \/>\n            <span class=\"token key atrule\">type<\/span><span class=\"token punctuation\">:<\/span> PathPrefix<br \/>\n            <span class=\"token key atrule\">value<\/span><span class=\"token punctuation\">:<\/span> \/<\/p>\n<hr \/>\n<h3>5. \u7b2c\u56db\u6b65&#xff1a;Logto Cloud &#043; GitHub OAuth \u539f\u751f\u5355\u70b9\u767b\u5f55 (SSO)<\/h3>\n<p>MinIO \u539f\u751f\u652f\u6301 OpenID Connect (OIDC) \u8ba4\u8bc1\u534f\u8bae\u3002\u901a\u8fc7\u63a5\u5165 Logto Cloud&#xff0c;\u53ef\u4ee5\u5f7b\u5e95\u544a\u522b\u5728\u7f51\u9875\u4e0a\u624b\u8f93\u8d26\u6237\u5bc6\u7801\u7684\u7e41\u7410\u6d41\u7a0b&#xff0c;\u5b9e\u73b0 GitHub \u4e00\u952e\u6388\u6743\u514d\u5bc6\u767b\u5f55\u3002<\/p>\n<h4>5.1 Logto \u7aef\u81ea\u52a8\u5316\u914d\u7f6e (Management API)<\/h4>\n<p>\u4f7f\u7528 Logto M2M \u51ed\u8bc1\u8c03\u7528 Management API&#xff0c;\u5c06 MinIO \u7684\u56de\u8c03\u5730\u5740\u52a0\u5165\u5ba2\u6237\u7aef\u767d\u540d\u5355&#xff1a;<\/p>\n<ul>\n<li>Redirect URIs \u589e\u52a0&#xff1a;https:\/\/minio.jppwl.asia\/oauth_callback<\/li>\n<li>Post Sign-out URIs \u589e\u52a0&#xff1a;https:\/\/minio.jppwl.asia<\/li>\n<\/ul>\n<p><span class=\"token comment\"># \u83b7\u53d6 Logto M2M \u7ba1\u7406 Token \u5e76\u66f4\u65b0\u5e94\u7528\u91cd\u5b9a\u5411\u914d\u7f6e<\/span><br \/>\n<span class=\"token assign-left variable\">TOKEN<\/span><span class=\"token operator\">&#061;<\/span><span class=\"token variable\"><span class=\"token variable\">$(<\/span><span class=\"token function\">curl<\/span> <span class=\"token parameter variable\">-s<\/span> <span class=\"token parameter variable\">-X<\/span> POST <span class=\"token string\">&#034;https:\/\/sodaxw.logto.app\/oidc\/token&#034;<\/span> <span class=\"token punctuation\">\\\\<\/span><br \/>\n  <span class=\"token parameter variable\">-H<\/span> <span class=\"token string\">&#034;Content-Type: application\/x-www-form-urlencoded&#034;<\/span> <span class=\"token punctuation\">\\\\<\/span><br \/>\n  <span class=\"token parameter variable\">-d<\/span> <span class=\"token string\">&#034;grant_type&#061;client_credentials&amp;client_id&#061;YOUR_M2M_ID&amp;client_secret&#061;YOUR_M2M_SECRET&amp;resource&#061;https:\/\/sodaxw.logto.app\/api&amp;scope&#061;all&#034;<\/span> <span class=\"token operator\">|<\/span> jq <span class=\"token parameter variable\">-r<\/span> <span class=\"token string\">&#039;.access_token&#039;<\/span><span class=\"token variable\">)<\/span><\/span><\/p>\n<p><span class=\"token function\">curl<\/span> <span class=\"token parameter variable\">-s<\/span> <span class=\"token parameter variable\">-X<\/span> PATCH <span class=\"token string\">&#034;https:\/\/sodaxw.logto.app\/api\/applications\/YOUR_APP_ID&#034;<\/span> <span class=\"token punctuation\">\\\\<\/span><br \/>\n  <span class=\"token parameter variable\">-H<\/span> <span class=\"token string\">&#034;Authorization: Bearer <span class=\"token variable\">$TOKEN<\/span>&#034;<\/span> <span class=\"token punctuation\">\\\\<\/span><br \/>\n  <span class=\"token parameter variable\">-H<\/span> <span class=\"token string\">&#034;Content-Type: application\/json&#034;<\/span> <span class=\"token punctuation\">\\\\<\/span><br \/>\n  <span class=\"token parameter variable\">-d<\/span> <span class=\"token string\">&#039;{<br \/>\n    &#034;oidcClientMetadata&#034;: {<br \/>\n      &#034;redirectUris&#034;: [&#034;https:\/\/minio.jppwl.asia\/oauth_callback&#034;],<br \/>\n      &#034;postLogoutRedirectUris&#034;: [&#034;https:\/\/minio.jppwl.asia&#034;]<br \/>\n    }<br \/>\n  }&#039;<\/span><\/p>\n<h4>5.2 MinIO \u73af\u5883\u53d8\u91cf\u6ce8\u5165 OIDC \u914d\u7f6e<\/h4>\n<p>\u5728 MinIO Deployment \u4e2d\u6ce8\u5165 OIDC \u76f8\u5173\u73af\u5883\u53d8\u91cf&#xff0c;\u5e76\u7ed1\u5b9a\u7ba1\u7406\u5458\u6743\u9650\u89d2\u8272\u7b56\u7565&#xff08;role_policy: consoleAdmin&#xff09;&#xff1a;<\/p>\n<p><span class=\"token key atrule\">env<\/span><span class=\"token punctuation\">:<\/span><br \/>\n  <span class=\"token comment\"># &#061;&#061;&#061; Logto OpenID Connect (OIDC) SSO &#061;&#061;&#061;<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> MINIO_IDENTITY_OPENID_CONFIG_URL<br \/>\n    <span class=\"token key atrule\">value<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;https:\/\/sodaxw.logto.app\/oidc\/.well-known\/openid-configuration&#034;<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> MINIO_IDENTITY_OPENID_CLIENT_ID<br \/>\n    <span class=\"token key atrule\">value<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;inck8s2812o0gzfgzqvug&#034;<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> MINIO_IDENTITY_OPENID_CLIENT_SECRET<br \/>\n    <span class=\"token key atrule\">valueFrom<\/span><span class=\"token punctuation\">:<\/span><br \/>\n      <span class=\"token key atrule\">secretKeyRef<\/span><span class=\"token punctuation\">:<\/span><br \/>\n        <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> minio<span class=\"token punctuation\">&#8211;<\/span>secret<br \/>\n        <span class=\"token key atrule\">key<\/span><span class=\"token punctuation\">:<\/span> MINIO_IDENTITY_OPENID_CLIENT_SECRET<br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> MINIO_IDENTITY_OPENID_SCOPES<br \/>\n    <span class=\"token key atrule\">value<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;openid,profile,email&#034;<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> MINIO_IDENTITY_OPENID_REDIRECT_URI<br \/>\n    <span class=\"token key atrule\">value<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;https:\/\/minio.jppwl.asia\/oauth_callback&#034;<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> MINIO_IDENTITY_OPENID_DISPLAY_NAME<br \/>\n    <span class=\"token key atrule\">value<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;Logto \/ GitHub SSO&#034;<\/span><br \/>\n  <span class=\"token punctuation\">&#8211;<\/span> <span class=\"token key atrule\">name<\/span><span class=\"token punctuation\">:<\/span> MINIO_IDENTITY_OPENID_ROLE_POLICY<br \/>\n    <span class=\"token key atrule\">value<\/span><span class=\"token punctuation\">:<\/span> <span class=\"token string\">&#034;consoleAdmin&#034;<\/span><\/p>\n<p>\u914d\u7f6e\u751f\u6548\u540e&#xff0c;\u8bbf\u95ee https:\/\/minio.jppwl.asia \u9875\u9762\u5c06\u5c55\u793a\u300cLog in with Logto \/ GitHub SSO\u300d\u6309\u94ae&#xff0c;\u70b9\u51fb\u540e\u81ea\u52a8\u901a\u8fc7 GitHub \u8eab\u4efd\u8ba4\u8bc1\u5e76\u65e0\u7f1d\u8df3\u8f6c\u81f3 MinIO \u63a7\u5236\u53f0\u4e3b\u754c\u9762\u3002<\/p>\n<hr \/>\n<h3>6. \u7b2c\u4e94\u6b65&#xff1a;\u5b58\u50a8\u6876\u521d\u59cb\u5316\u4e0e\u751f\u547d\u5468\u671f\u7b56\u7565 (ILM)<\/h3>\n<p>\u670d\u52a1\u542f\u52a8\u540e&#xff0c;\u901a\u8fc7 mc (MinIO Client) \u5b8c\u6210\u57fa\u7840 Bucket \u7684\u521b\u5efa\u4e0e\u7b56\u7565\u4e0b\u53d1&#xff1a;<\/p>\n<p><span class=\"token comment\"># 1. \u914d\u7f6e\u96c6\u7fa4\u5185\u522b\u540d<\/span><br \/>\n<span class=\"token function\">mc<\/span> <span class=\"token builtin class-name\">alias<\/span> <span class=\"token builtin class-name\">set<\/span> <span class=\"token builtin class-name\">local<\/span> http:\/\/localhost:9000 litellm_admin YOUR_PASSWORD<\/p>\n<p><span class=\"token comment\"># 2. \u521b\u5efa\u7528\u4e8e\u5b58\u50a8\u5927\u6a21\u578b Payload \u7684\u4e13\u7528\u6876<\/span><br \/>\n<span class=\"token function\">mc<\/span> mb local\/litellm-payloads<\/p>\n<p><span class=\"token comment\"># 3. \u8bbe\u7f6e\u4e0b\u8f7d\u7b56\u7565\u4e3a\u516c\u5f00\u53ea\u8bfb (\u4fbf\u4e8e\u672a\u6765\u5728 MySQL \u89c6\u56fe\u4e2d\u901a\u8fc7\u8d85\u94fe\u63a5\u76f4\u63a5\u67e5\u770b JSON)<\/span><br \/>\n<span class=\"token function\">mc<\/span> anonymous <span class=\"token builtin class-name\">set<\/span> download local\/litellm-payloads<\/p>\n<p><span class=\"token comment\"># 4. \u914d\u7f6e 90 \u5929\u81ea\u52a8\u8fc7\u671f\u751f\u547d\u5468\u671f\u89c4\u5219 (\u9632\u6b62\u5386\u53f2\u65e5\u5fd7\u957f\u671f\u79ef\u7d2f\u6324\u5360\u78c1\u76d8)<\/span><br \/>\n<span class=\"token function\">mc<\/span> ilm rule <span class=\"token function\">add<\/span> local\/litellm-payloads &#8211;expire-days <span class=\"token number\">90<\/span><\/p>\n<hr \/>\n<h3>7. \u67b6\u6784\u6536\u76ca\u4e0e\u603b\u7ed3<\/h3>\n<p>\u901a\u8fc7\u672c\u5957\u65b9\u6848&#xff0c;\u5728\u65e0\u9700\u91c7\u8d2d\u516c\u6709\u4e91\u6602\u8d35\u5bf9\u8c61\u5b58\u50a8\u670d\u52a1\u7684\u524d\u63d0\u4e0b&#xff0c;\u5b9e\u73b0\u4e86\u4e00\u5957\u9ad8\u53ef\u7528\u3001\u96f6\u989d\u5916\u5f00\u9500\u7684\u79c1\u6709\u5316 S3 \u57fa\u7840\u8bbe\u65bd&#xff1a;<\/p>\n<li>\u771f\u6b63\u7684\u51b7\u70ed\u6570\u636e\u5206\u79bb&#xff1a;MySQL \u53ea\u627f\u8f7d\u8f7b\u91cf\u7ea7\u6307\u6807\u4e0e\u805a\u5408\u62a5\u8868&#xff0c;\u6d77\u91cf\u4e0a\u4e0b\u6587 Payload \u5f02\u6b65\u5199\u5165 NUC \u672c\u5730 MinIO&#xff0c;\u5f7b\u5e95\u6d88\u9664\u6570\u636e\u5e93\u6027\u80fd\u74f6\u9888&#xff1b;<\/li>\n<li>\u6781\u7b80\u8fd0\u7ef4\u4e0e\u81ea\u6108&#xff1a;\u6240\u6709\u57fa\u7840\u8bbe\u65bd\u914d\u7f6e 100% \u7eb3\u5165 ArgoCD GitOps \u4f53\u7cfb&#xff0c;\u8282\u70b9\u91cd\u542f\u6216 Pod \u5f02\u5e38\u5747\u7531 K3s \u81ea\u52a8\u7f16\u6392\u81ea\u6108&#xff1b;<\/li>\n<li>\u516c\u7f51\u8bbf\u95ee\u4e0e\u4f01\u4e1a\u7ea7\u5b89\u5168&#xff1a;Cloudflare Edge SSL \u7ec8\u7ed3 &#043; Kong \u7f51\u5173\u53cd\u5411\u4ee3\u7406 &#043; Logto OIDC \u5355\u70b9\u767b\u5f55&#xff0c;\u517c\u987e\u5916\u7f51\u968f\u65f6\u968f\u5730\u76f4\u8fde\u4e0e\u4e25\u683c\u7684\u8bbf\u95ee\u63a7\u5236&#xff1b;<\/li>\n<li>100% \u6570\u636e\u4e3b\u6743&#xff1a;\u6240\u6709\u8c03\u7528\u654f\u611f Prompts \u7a33\u7a33\u843d\u5728\u5bb6\u5ead Homelab \u7684 NVMe \u786c\u76d8\u4e2d&#xff0c;\u675c\u7edd\u4efb\u4f55\u5916\u90e8\u6570\u636e\u5408\u89c4\u98ce\u9669\u3002<\/li>\n","protected":false},"excerpt":{"rendered":"<p>1. \u80cc\u666f\u4e0e\u67b6\u6784\u9700\u6c42<br \/>\n\u5728\u6784\u5efa\u4f01\u4e1a\u7ea7\u5927\u6a21\u578b\u7f51\u5173\u4e0e\u4e2d\u95f4\u4ef6&#xff08;\u5982 LiteLLM Proxy&#xff09;\u7684\u8fc7\u7a0b\u4e2d&#xff0c;\u9762\u4e34\u7740\u4e00\u4e2a\u6838\u5fc3\u77db\u76fe&#xff1a;<br \/>\n\u70ed\u6570\u636e\u4e0e\u6307\u6807\u5206\u6790&#xff1a;\u8c03\u7528\u8017\u65f6\u3001Token \u8ba1\u91cf\u3001USD\/CNY \u6263\u8d39\u3001\u6a21\u578b\u8def\u7531\u8f68\u8ff9\u7b49\u7ed3\u6784\u5316\u6570\u636e&#xff0c;\u9002\u5408\u5b58\u653e\u5728\u6258\u7ba1\u5173\u7cfb\u578b\u6570\u636e\u5e93&#xff08;\u5982 OCI MySQL \/ PostgreSQL&#xff09;\u4e2d&#xff0c;\u4fdd\u8bc1\u62a5\u8868\u67e5\u8be2\u79d2\u7ea7\u54cd\u5e94&#xff1b;\u51b7\u6570\u636e\u4e0e\u957f\u6587\u672c Payl<\/p>\n","protected":false},"author":2,"featured_media":101394,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[9829],"topic":[],"class_list":["post-101395","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-argocd"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u5b9e\u6218\uff1a\u57fa\u4e8e K3s + ArgoCD GitOps \u5728\u672c\u5730 NUC \u843d\u5730 MinIO \u5bf9\u8c61\u5b58\u50a8\u5e76\u901a\u8fc7\u516c\u7f51 SSO \u5b89\u5168\u8bbf\u95ee - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/101395.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5b9e\u6218\uff1a\u57fa\u4e8e K3s + ArgoCD GitOps \u5728\u672c\u5730 NUC \u843d\u5730 MinIO \u5bf9\u8c61\u5b58\u50a8\u5e76\u901a\u8fc7\u516c\u7f51 SSO \u5b89\u5168\u8bbf\u95ee - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"1. \u80cc\u666f\u4e0e\u67b6\u6784\u9700\u6c42 \u5728\u6784\u5efa\u4f01\u4e1a\u7ea7\u5927\u6a21\u578b\u7f51\u5173\u4e0e\u4e2d\u95f4\u4ef6&#xff08;\u5982 LiteLLM Proxy&#xff09;\u7684\u8fc7\u7a0b\u4e2d&#xff0c;\u9762\u4e34\u7740\u4e00\u4e2a\u6838\u5fc3\u77db\u76fe&#xff1a; \u70ed\u6570\u636e\u4e0e\u6307\u6807\u5206\u6790&#xff1a;\u8c03\u7528\u8017\u65f6\u3001Token \u8ba1\u91cf\u3001USD\/CNY \u6263\u8d39\u3001\u6a21\u578b\u8def\u7531\u8f68\u8ff9\u7b49\u7ed3\u6784\u5316\u6570\u636e&#xff0c;\u9002\u5408\u5b58\u653e\u5728\u6258\u7ba1\u5173\u7cfb\u578b\u6570\u636e\u5e93&#xff08;\u5982 OCI MySQL \/ PostgreSQL&#xff09;\u4e2d&#xff0c;\u4fdd\u8bc1\u62a5\u8868\u67e5\u8be2\u79d2\u7ea7\u54cd\u5e94&#xff1b;\u51b7\u6570\u636e\u4e0e\u957f\u6587\u672c Payl\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/101395.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-06T11:09:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260906110859-6a9d49cb9d839.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/101395.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/101395.html\",\"name\":\"\u5b9e\u6218\uff1a\u57fa\u4e8e K3s + ArgoCD GitOps \u5728\u672c\u5730 NUC \u843d\u5730 MinIO \u5bf9\u8c61\u5b58\u50a8\u5e76\u901a\u8fc7\u516c\u7f51 SSO \u5b89\u5168\u8bbf\u95ee - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-09-06T11:09:02+00:00\",\"dateModified\":\"2026-09-06T11:09:02+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/101395.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/101395.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/101395.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5b9e\u6218\uff1a\u57fa\u4e8e K3s + ArgoCD GitOps \u5728\u672c\u5730 NUC \u843d\u5730 MinIO \u5bf9\u8c61\u5b58\u50a8\u5e76\u901a\u8fc7\u516c\u7f51 SSO \u5b89\u5168\u8bbf\u95ee\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u5b9e\u6218\uff1a\u57fa\u4e8e K3s + ArgoCD GitOps \u5728\u672c\u5730 NUC \u843d\u5730 MinIO \u5bf9\u8c61\u5b58\u50a8\u5e76\u901a\u8fc7\u516c\u7f51 SSO \u5b89\u5168\u8bbf\u95ee - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/101395.html","og_locale":"zh_CN","og_type":"article","og_title":"\u5b9e\u6218\uff1a\u57fa\u4e8e K3s + ArgoCD GitOps \u5728\u672c\u5730 NUC \u843d\u5730 MinIO \u5bf9\u8c61\u5b58\u50a8\u5e76\u901a\u8fc7\u516c\u7f51 SSO \u5b89\u5168\u8bbf\u95ee - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"1. \u80cc\u666f\u4e0e\u67b6\u6784\u9700\u6c42 \u5728\u6784\u5efa\u4f01\u4e1a\u7ea7\u5927\u6a21\u578b\u7f51\u5173\u4e0e\u4e2d\u95f4\u4ef6&#xff08;\u5982 LiteLLM Proxy&#xff09;\u7684\u8fc7\u7a0b\u4e2d&#xff0c;\u9762\u4e34\u7740\u4e00\u4e2a\u6838\u5fc3\u77db\u76fe&#xff1a; \u70ed\u6570\u636e\u4e0e\u6307\u6807\u5206\u6790&#xff1a;\u8c03\u7528\u8017\u65f6\u3001Token \u8ba1\u91cf\u3001USD\/CNY \u6263\u8d39\u3001\u6a21\u578b\u8def\u7531\u8f68\u8ff9\u7b49\u7ed3\u6784\u5316\u6570\u636e&#xff0c;\u9002\u5408\u5b58\u653e\u5728\u6258\u7ba1\u5173\u7cfb\u578b\u6570\u636e\u5e93&#xff08;\u5982 OCI MySQL \/ PostgreSQL&#xff09;\u4e2d&#xff0c;\u4fdd\u8bc1\u62a5\u8868\u67e5\u8be2\u79d2\u7ea7\u54cd\u5e94&#xff1b;\u51b7\u6570\u636e\u4e0e\u957f\u6587\u672c Payl","og_url":"https:\/\/www.wsisp.com\/helps\/101395.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-09-06T11:09:02+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/09\/20260906110859-6a9d49cb9d839.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"5 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/101395.html","url":"https:\/\/www.wsisp.com\/helps\/101395.html","name":"\u5b9e\u6218\uff1a\u57fa\u4e8e K3s + ArgoCD GitOps \u5728\u672c\u5730 NUC \u843d\u5730 MinIO \u5bf9\u8c61\u5b58\u50a8\u5e76\u901a\u8fc7\u516c\u7f51 SSO \u5b89\u5168\u8bbf\u95ee - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-09-06T11:09:02+00:00","dateModified":"2026-09-06T11:09:02+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/101395.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/101395.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/101395.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u5b9e\u6218\uff1a\u57fa\u4e8e K3s + ArgoCD GitOps \u5728\u672c\u5730 NUC \u843d\u5730 MinIO \u5bf9\u8c61\u5b58\u50a8\u5e76\u901a\u8fc7\u516c\u7f51 SSO \u5b89\u5168\u8bbf\u95ee"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/101395","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=101395"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/101395\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/101394"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=101395"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=101395"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=101395"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=101395"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}