- README.md (英文): 项目概览 + 11 Tool 表格 + 12 env 变量全表 + 6 admin 端点 + 安全模型 (3 道防线 + 4 项额外保证) + dev 命令 - .env.example: 12 env 变量 + 默认值 + 必填标注 - scripts/dev.sh: 一键 build + 后台启动 (nohup + PID 文件) + healthz 验证 - scripts/seed.sh: admin POST 一个示例 cluster (从 .env 读 admin token) - ARCHITECTURE.md (中文): 包依赖图 + 数据流 + 11 Tool 分类 + 关键设计决策 - docs/runbook.md (中文): 部署 + 升级 + 故障排查 (401/404/422 等) - docs/systemd/spark-mcp-go.service: systemd unit 模板 README 安全模型小修正: 第 3 道防线从"spark_submit flag 白名单" (实际不存在) 改为 "upload_file 路径白名单", 加 Additional guarantees 小节列 slice form / json:"-" / 跨主机 redirect / per-tool log 权限。 Co-Authored-By: Claude <noreply@anthropic.com>
38 lines
1.0 KiB
Bash
38 lines
1.0 KiB
Bash
# spark-mcp-go environment configuration
|
|
# Copy to .env and edit the *REQUIRED* values.
|
|
|
|
# HTTP listen address (default: :8080)
|
|
LISTEN_ADDR=:8080
|
|
|
|
# Root directory for SQLite, uploads, and logs (default: ./data)
|
|
DATA_DIR=./data
|
|
|
|
# *REQUIRED* Comma-separated admin bearer tokens for /admin/* endpoints
|
|
ADMIN_TOKENS=change-me-admin-token-1,change-me-admin-token-2
|
|
|
|
# *REQUIRED* Agent bearer token for /mcp endpoints
|
|
AGENT_TOKEN=change-me-agent-token
|
|
|
|
# Timeout for fetch_url and RM tool HTTP calls (default: 30s)
|
|
HTTP_CLIENT_TIMEOUT=30s
|
|
|
|
# Maximum HTTP response bytes before truncation (default: 1048576)
|
|
MAX_RESPONSE_BYTES=1048576
|
|
|
|
# Timeout for spark-submit process execution (default: 60s)
|
|
SPARK_SUBMIT_TIMEOUT=60s
|
|
|
|
# Log directory (default: ./data/logs)
|
|
LOG_DIR=./data/logs
|
|
|
|
# Log level: debug, info, warn, error (default: info)
|
|
LOG_LEVEL=info
|
|
|
|
# Log format: text (terminal) or json (log file; default: text)
|
|
LOG_FORMAT=text
|
|
|
|
# Analyzer heuristic thresholds (defaults shown)
|
|
ANALYZER_DATA_SKEW_RATIO=3.0
|
|
ANALYZER_GC_PRESSURE_RATIO=0.1
|
|
ANALYZER_BOTTLENECK_SHUFFLE_GB=50
|