dify-kubernetes

KO | EN

gitlite — search

#react #ai #golang #android #linux #macos #java #nodejs #awesome #cli #kubernetes #pytorch #security #openai

dify-kubernetes

(★ 372)

Deploy Dify on Kubernetes

파일 탐색기

최종 버전 다운로드 (.zip)

- - api.yaml
  - README.md
  - worker.yaml
- - chroma.yaml
  - milvus.yaml
  - myscale.yaml
  - opensearch.yaml
  - oracle.yaml
  - pgvecto-rs.yaml
  - pgvector.yaml
  - postgres.yaml
  - qdrant.yaml
  - redis.yaml
  - weaviate.yaml
- - test.yaml
- - sandbox.yaml
  - ssrf.yaml
- - ingress.yaml
  - nginx.yaml
- - web.yaml
- namespace.yaml
- secrets.yaml
- services.yaml
dify-deployment.yaml
dify-mirror-deployment.yaml
LICENSE
README.md
README_CN.md
README_JA.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# dify-kubernetes

Deploy [Dify](https://dify.ai/) on Kubernetes

> Feel free to raise issues or email me if you need support 😊

[Email](mailto:mail@winson.dev)

> Star 🌟 if this repo helps you ~~

Try read this DeepWiki (Powered by Devin AI) first before start: [DeepWiki](https://deepwiki.com/Winson-030/dify-kubernetes)

# This is version v1.15.0

**This branch will merge to main when dify 1.0 tested stable, now it's not.**

This yaml file tested great in my local environment, but I think this need more testing. Please give me a hand, let me know if there is any error occurs. ~~This branch will merge to main a week later~~. I created a new branch to keep the version 0.15.3, the branch name is `release/v0.15.3`, checkout to this branch if you need.

## Development Plan

> If you need PVC as storage instead of hostPath, please checkout branch `feature/pvc-volume`
> To config S3 as storage backend, please refer to folder [dify/api](https://github.com/Winson-030/dify-kubernetes/pull/36)

### Add ssrf proxy component

Integrated ssrf proxy component into `dify-deployment.yaml` and `dify-mirror-deployment.yaml`. You can get files in `dify/middleware`.

### Other vector database

**Welcome PR!**
I have a development plan for this and will start in October 2024.

You can get files in `dify/database`.

I create a new branch for HA database setup which is `feature/dify-database-HA-setup`, and a folder `database-ha` under folder `dify`. Feel free to add files if you want to contribute to HA database!

## How to use

### Clone the repository

```shell
git clone https://github.com/Winson-030/dify-kubernetes.git
```
```
kubectl apply -f dify-deployment.yaml
```

### Apply Directly

```shell
kubectl apply -f https://raw.githubusercontent.com/Winson-030/dify-kubernetes/main/dify-deployment.yaml
```
## version 1.15.0
```
kubectl apply -f https://raw.githubusercontent.com/Winson-030/dify-kubernetes/refs/heads/upgrade/dify-version-100/dify-deployment.yaml
```

If cluster is not able to connect dockerhub directly(for most users in China), apply deployment with mirror registry preset below.

```shell
kubectl apply -f https://cdn.jsdelivr.net/gh/Winson-030/dify-kubernetes@main/dify-mirror-deployment.yaml
```
## version 1.15.0
```
kubectl apply -f https://cdn.jsdelivr.net/gh/Winson-030/dify-kubernetes@upgrade/dify-version-100/dify-mirror-deployment.yaml
```

After Deployed, you can visit the dify web site via nodeport at `http://$(PUBLIC_IP):30000`, the **default init password** is `password`, or you can deploy a ingress to your cluster.

```yaml
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: dify-ingress
  namespace: dify
spec:
  ingressClassName: "traefik"
  rules:
    - host: dify.example.com
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: dify-nginx
                port:
                  number: 80
          - path: /api
            pathType: Prefix
            backend:
              service:
                name: dify-nginx
                port:
                  number: 80
          - path: /console/api
            pathType: Prefix
            backend:
              service:
                name: dify-nginx
                port:
                  number: 80
          - path: /v1
            pathType: Prefix
            backend:
              service:
                name: dify-nginx
                port:
                  number: 80
          - path: /files
            pathType: Prefix
            backend:
              service:
                name: dify-nginx
                port:
                  number: 80
          - path: /explore
            pathType: Prefix
            backend:
              service:
                name: dify-nginx
                port:
                  number: 80                  
  tls:
    - secretName: dify-tls
```

If you wish to expose a dify API, please uninstall the nginx component and deploy the following ingress. If using the nginx ingress controller, modify this YAML file accordingly.

```yaml
# Traefik Ingress Route without nginx reverse proxy
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: dify-ingressroute
  namespace: dify
spec:
  entryPoints:
    - web
    - websecure
  routes:
    - kind: Rule
      # console web url
      match: Host(`dify.example.com`) && PathPrefix(`/`)
      middlewares:
        - name: ingress-cors
      services:
        - name: dify-web
          port: 3000
    - kind: Rule
      # app web url
      match: Host(`difyapp.example.com`) && PathPrefix(`/`)
      middlewares:
        - name: ingress-cors
      services:
        - name: dify-web
          port: 3000
    - kind: Rule
      # service api url
      match: Host(`difyapi.example.com`) && PathPrefix(`/`)
      middlewares:
        - name: ingress-cors
      services:
        - name: dify-api
          port: 5001
    - kind: Rule
      # console api url
      match: Host(`consoleapi.example.com`) && PathPrefix(`/`)
      middlewares:
        - name: ingress-cors
      services:
        - name: dify-api
          port: 5001

- kind: Rule
      # app api url
      match: Host(`appapi.example.com`) && PathPrefix(`/`)
      middlewares:
        - name: ingress-cors
      services:
        - name: dify-api
          port: 5001
  tls:
    secretName: dify-tls
# Traefik Middleware for Ingress
---
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: ingress-cors
  namespace: dify
spec:
  headers:
    accessControlAllowCredentials: true
    accessControlAllowMethods:
      - "GET"
      - "OPTIONS"
      - "PUT"
      - "POST"
      - "DELETE"
      - "PATCH"
    accessControlAllowHeaders:
      # - "*"
      - "Content-Type"
      - "authorization"
      - "x-app-code"
    accessControlAllowOriginList:
      # - "*"
      - "https://consoleapi.example.com"
      - "https://dify.example.com"
      - "https://difyapi.example.com"
      - "https://difyapp.example.com"
      - "https://appapi.example.com"
    accessControlMaxAge: 100
    addVaryHeader: true
```

## Star History

[![Star History Chart](https://star-history.dera.page/svg?repos=Winson-030/dify-kubernetes&type=Date)](https://star-history.dera.page/#Winson-030/dify-kubernetes&Date)

dify-kubernetes

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

dify-kubernetes

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README