Skip to content

docs: LANGFLOW_ENABLE_SUPERUSER_CLI environment variable#9223

Merged
mendonk merged 6 commits into
mainfrom
docs-add-superuser-env-var
Jul 30, 2025
Merged

docs: LANGFLOW_ENABLE_SUPERUSER_CLI environment variable#9223
mendonk merged 6 commits into
mainfrom
docs-add-superuser-env-var

Conversation

@mendonk
Copy link
Copy Markdown
Collaborator

@mendonk mendonk commented Jul 29, 2025

Document new environment variable and add notes to applicable pages to explain the behavior.

#9152

Summary by CodeRabbit

  • Documentation
    • Added notes clarifying that creating API keys via the CLI requires superuser privileges, and API key creation may be blocked if no superuser exists and CLI superuser creation is disabled.
    • Updated CLI documentation to explain the impact of the LANGFLOW_ENABLE_SUPERUSER_CLI environment variable on superuser and API key management commands.
    • Documented the new LANGFLOW_ENABLE_SUPERUSER_CLI environment variable, including usage recommendations for production environments.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Jul 29, 2025

Important

Review skipped

Auto incremental reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Walkthrough

Documentation was updated to clarify the requirements and security implications of creating superusers and API keys via the CLI. A new environment variable, LANGFLOW_ENABLE_SUPERUSER_CLI, was documented, and explicit notes were added regarding its effect on CLI commands for superuser and API key management.

Changes

Cohort / File(s) Change Summary
API Key CLI Privilege Notes
docs/docs/Configuration/configuration-api-keys.mdx
Added a note clarifying that API key creation via CLI requires superuser privileges and may be blocked if LANGFLOW_ENABLE_SUPERUSER_CLI is false and no superuser exists.
CLI Command Security Notes
docs/docs/Configuration/configuration-cli.mdx
Updated documentation for langflow api-key and langflow superuser commands to include notes about the effect of LANGFLOW_ENABLE_SUPERUSER_CLI on command availability and security.
Environment Variable Documentation
docs/docs/Configuration/environment-variables.mdx
Added documentation for the new environment variable LANGFLOW_ENABLE_SUPERUSER_CLI, describing its purpose, default, and security recommendations.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested labels

documentation, size:S, lgtm

Suggested reviewers

  • aimurphy
✨ Finishing Touches
🧪 Generate unit tests
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch docs-add-superuser-env-var

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Explain this complex logic.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai explain this code block.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and explain its main purpose.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate docstrings to generate docstrings for this PR.
  • @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
  • @coderabbitai generate unit tests to generate unit tests for this PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

@github-actions github-actions Bot added the documentation Improvements or additions to documentation label Jul 29, 2025
@github-actions github-actions Bot added documentation Improvements or additions to documentation and removed documentation Improvements or additions to documentation labels Jul 29, 2025
Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

🧹 Nitpick comments (3)
docs/docs/Configuration/environment-variables.mdx (1)

207-207: Reference api-key command & extend examples for completeness

The new row is clear but it omits two practical details that help readers:

  1. LANGFLOW_ENABLE_SUPERUSER_CLI=false also disables the langflow api-key command if no superuser exists—worth mentioning next to the existing link to the superuser command.
  2. The variable is not included in any of the subsequent “.env”, systemd or VSCode examples, so users might miss it.

Consider amending the description and adding the variable to the example blocks:

-| Allow creation of superusers via CLI. Set to `false` in production for security.<br/>See [`superuser` command](./configuration-cli.mdx#superuser). |
+| Allow creation of superusers via the CLI. Set to `false` in production for security. Disables both <code>langflow superuser</code> and <code>langflow api-key</code> commands if no superuser exists.<br/>See [`superuser` command](./configuration-cli.mdx#superuser) and [`api-key` command](./configuration-cli.mdx#langflow-api-key). |

and, in each example block:

 LANGFLOW_BACKEND_ONLY=false
+# Disable CLI superuser creation in production
+# LANGFLOW_ENABLE_SUPERUSER_CLI=false
 LANGFLOW_BUNDLE_URLS=["https://github.com/user/repo/commit/hash"]
docs/docs/Configuration/configuration-cli.mdx (2)

41-44: Use :::warning to highlight potential lock-out

Because disabling the variable can break API-key creation on a running instance, elevating the admonition from note to warning makes the consequence more visible:

-:::note
+:::warning
 API key creation via the CLI …
-:::
+:::

141-144: Same visibility concern for superuser command

For consistency with the previous suggestion and to stress the operational impact, switch the admonition type:

-:::note
+:::warning
 If [`LANGFLOW_ENABLE_SUPERUSER_CLI`]…
-:::
+:::
📜 Review details

Configuration used: .coderabbit.yaml
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between cb34e4f and 7764fd7.

📒 Files selected for processing (3)
  • docs/docs/Configuration/configuration-api-keys.mdx (1 hunks)
  • docs/docs/Configuration/configuration-cli.mdx (2 hunks)
  • docs/docs/Configuration/environment-variables.mdx (1 hunks)
🧰 Additional context used
📓 Path-based instructions (1)
docs/docs/**/*.{md,mdx}

📄 CodeRabbit Inference Engine (.cursor/rules/docs_development.mdc)

docs/docs/**/*.{md,mdx}: All documentation content must be written in Markdown or MDX files located under docs/docs/, following the prescribed directory structure for guides, reference, how-to, concepts, and API documentation.
All documentation Markdown and MDX files must begin with a frontmatter block including at least title and description fields.
Use admonitions (:::tip, :::warning, :::danger) in Markdown/MDX files to highlight important information, warnings, or critical issues.
All images referenced in documentation must include descriptive alt text for accessibility.
All code examples included in documentation must be tested and verified to work as shown.
Internal links in documentation must be functional and not broken.
Content must follow the style guide: professional but approachable tone, second person voice, present tense, short paragraphs, sentence case headers, inline code with backticks, bold for UI elements, italic for emphasis, and parallel structure in lists.
Use consistent terminology: always capitalize Langflow, Component, Flow, and uppercase API and JSON.

Files:

  • docs/docs/Configuration/configuration-api-keys.mdx
  • docs/docs/Configuration/environment-variables.mdx
  • docs/docs/Configuration/configuration-cli.mdx
🧠 Learnings (3)
📓 Common learnings
Learnt from: CR
PR: langflow-ai/langflow#0
File: .cursor/rules/docs_development.mdc:0-0
Timestamp: 2025-06-23T12:46:29.953Z
Learning: When writing documentation for Langflow using Docusaurus, always use professional but approachable tone, second person voice for instructions, and present tense for current features.
Learnt from: CR
PR: langflow-ai/langflow#0
File: .cursor/rules/docs_development.mdc:0-0
Timestamp: 2025-07-18T18:26:42.027Z
Learning: Applies to docs/docs/**/*.{md,mdx} : Use consistent terminology: always capitalize Langflow, Component, Flow, and uppercase API and JSON.
docs/docs/Configuration/environment-variables.mdx (3)

Learnt from: CR
PR: langflow-ai/langflow#0
File: .cursor/rules/docs_development.mdc:0-0
Timestamp: 2025-07-18T18:26:42.027Z
Learning: Applies to docs/docs/**/*.{md,mdx} : Use consistent terminology: always capitalize Langflow, Component, Flow, and uppercase API and JSON.

Learnt from: CR
PR: langflow-ai/langflow#0
File: .cursor/rules/docs_development.mdc:0-0
Timestamp: 2025-06-23T12:46:29.953Z
Learning: All terminology such as 'Langflow', 'Component', 'Flow', 'API', and 'JSON' must be capitalized or uppercased as specified in the terminology section.

Learnt from: deon-sanchez
PR: #9158
File: src/backend/base/langflow/api/v1/mcp_projects.py:404-404
Timestamp: 2025-07-23T21:19:22.567Z
Learning: In langflow MCP projects configuration, prefer using dynamically computed URLs (like the sse_url variable) over hardcoded localhost URLs to ensure compatibility across different deployment environments.

docs/docs/Configuration/configuration-cli.mdx (3)

Learnt from: CR
PR: langflow-ai/langflow#0
File: .cursor/rules/docs_development.mdc:0-0
Timestamp: 2025-07-18T18:26:42.027Z
Learning: Applies to docs/docs/**/*.{md,mdx} : Use consistent terminology: always capitalize Langflow, Component, Flow, and uppercase API and JSON.

Learnt from: CR
PR: langflow-ai/langflow#0
File: .cursor/rules/docs_development.mdc:0-0
Timestamp: 2025-06-23T12:46:29.953Z
Learning: When writing documentation for Langflow using Docusaurus, always use professional but approachable tone, second person voice for instructions, and present tense for current features.

Learnt from: CR
PR: langflow-ai/langflow#0
File: .cursor/rules/docs_development.mdc:0-0
Timestamp: 2025-06-23T12:46:29.953Z
Learning: All terminology such as 'Langflow', 'Component', 'Flow', 'API', and 'JSON' must be capitalized or uppercased as specified in the terminology section.

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (1)
  • GitHub Check: build-and-deploy
🔇 Additional comments (1)
docs/docs/Configuration/configuration-api-keys.mdx (1)

53-55: LGTM – note is concise and follows style guide

The admonition clearly states the requirement and links to the new variable. Tone, second-person voice, and capitalization all match the docs guidelines.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jul 29, 2025

Build successful! ✅
Deploying docs draft.
Deploy successful! View draft

Comment thread docs/docs/Configuration/configuration-api-keys.mdx Outdated
Copy link
Copy Markdown
Collaborator

@aimurphy aimurphy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please see my comments

Comment thread docs/docs/Configuration/configuration-api-keys.mdx Outdated
Comment thread docs/docs/Configuration/configuration-cli.mdx Outdated
Comment thread docs/docs/Configuration/environment-variables.mdx Outdated
Comment thread docs/docs/Configuration/configuration-cli.mdx Outdated
@github-actions github-actions Bot added documentation Improvements or additions to documentation and removed documentation Improvements or additions to documentation labels Jul 30, 2025
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jul 30, 2025

Build successful! ✅
Deploying docs draft.
Deploy successful! View draft

@SonicDMG SonicDMG temporarily deployed to docs-add-superuser-env-var - langflow-manual-install PR #9223 July 30, 2025 13:32 — with Render Destroyed
@github-actions github-actions Bot added documentation Improvements or additions to documentation and removed documentation Improvements or additions to documentation labels Jul 30, 2025
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jul 30, 2025

Build successful! ✅
Deploying docs draft.
Deploy successful! View draft

@mendonk mendonk requested a review from aimurphy July 30, 2025 13:36
@github-actions github-actions Bot added documentation Improvements or additions to documentation and removed documentation Improvements or additions to documentation labels Jul 30, 2025
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jul 30, 2025

Build successful! ✅
Deploying docs draft.
Deploy successful! View draft

@SonicDMG SonicDMG temporarily deployed to docs-add-superuser-env-var - langflow-manual-install PR #9223 July 30, 2025 16:17 — with Render Destroyed
@github-actions github-actions Bot added documentation Improvements or additions to documentation and removed documentation Improvements or additions to documentation labels Jul 30, 2025
@sonarqubecloud
Copy link
Copy Markdown

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jul 30, 2025

Build successful! ✅
Deploying docs draft.
Deploy successful! View draft

Copy link
Copy Markdown
Collaborator

@aimurphy aimurphy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@mendonk take a look at the preview and then go ahead and merge this if you agree with the changes.

  • API keys and authentication:
    • Revise CLI tab in create a langflow API key
    • Add SUPERUSER_CLI to server setup section
    • Add SUPERUSER_CLI subsection under authentication env vars.
  • Quick revision of Langflow CLI page:
    • Bring usage details to the top of the page, including common options
    • Remove common options from the command subsections
    • Revise langflow superuser command explanation.
    • Link the langflow api-key command to the "Langflow API keys" section where it fully explains how to create API keys with the CLi.

@github-actions github-actions Bot added the lgtm This PR has been approved by a maintainer label Jul 30, 2025
@mendonk mendonk added this pull request to the merge queue Jul 30, 2025
Merged via the queue into main with commit 7123c50 Jul 30, 2025
17 checks passed
@mendonk mendonk deleted the docs-add-superuser-env-var branch July 30, 2025 16:43
This was referenced Jul 30, 2025
2getsandesh pushed a commit to 2getsandesh/langflow-IBM that referenced this pull request Aug 6, 2025
…#9223)

* add-superuser-cli-note-and-env-var

* code-review

* env-var-link

* resolve CLI superuser confusion

---------

Co-authored-by: April M <april.murphy@datastax.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation lgtm This PR has been approved by a maintainer

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants