unkinben
9e2c21131f
The vault-plugin-secrets-litellm engine mints LiteLLM virtual keys and is now registered in Vault, but nothing declared its mount/config or roles in this repo. Wire in the companion litellm provider so the mount is managed as code alongside the other secret backends. - Add litellm_secret_backend module: mounts the engine and writes its config (base_url, request_timeout_seconds); reads master_key from KV - Add litellm_secret_backend_role module: manages roles (models, max_budget, key_alias_prefix, ttl/max_ttl seconds, metadata) - Register both modules in vault_cluster main.tf and variables.tf - Discover litellm_secret_backend[_role] YAML in config.hcl and pass them through terragrunt inputs - Declare the litellm provider (litellmvaultsecret) and a provider block in the generated root backend.tf - Add example config for the litellm mount and a sample role
11 lines
175 B
YAML
11 lines
175 B
YAML
---
|
|
models:
|
|
- claude-haiku-4-5
|
|
- claude-sonnet-4-6
|
|
max_budget: 50
|
|
ttl: 3600 # seconds (1h)
|
|
max_ttl: 86400 # seconds (24h)
|
|
metadata:
|
|
team: mailfiltering
|
|
env: prod
|