From 0a977b8d1ac8d3e8f2f476512fe58232b120000b Mon Sep 17 00:00:00 2001 From: Ishaan Jaff Date: Wed, 24 Jun 2026 13:19:36 -0700 Subject: [PATCH] docs(ai-gateway): add data-plane auth env vars to render blueprint --- litellm-rust/crates/ai-gateway/render.yaml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/litellm-rust/crates/ai-gateway/render.yaml b/litellm-rust/crates/ai-gateway/render.yaml index 4170849f65d..18175c2c36f 100644 --- a/litellm-rust/crates/ai-gateway/render.yaml +++ b/litellm-rust/crates/ai-gateway/render.yaml @@ -27,9 +27,18 @@ services: value: /app/config.yaml - key: HOST value: 0.0.0.0 - # Bearer token clients must send on /v1/realtime (fail closed if unset). + # Admin bearer token, checked locally (no proxy call). Fail closed if unset. - key: LITELLM_MASTER_KEY sync: false + # Delegate virtual-key auth to the LiteLLM proxy (see README → "Authentication"). + # Dedicated secret authenticating the gateway to the proxy's verify endpoint; + # must match the proxy's LITELLM_DATA_PLANE_KEY. NOT the master key. + - key: LITELLM_DATA_PLANE_KEY + sync: false + # The proxy's internal verify endpoint, e.g. + # https:///internal/v1/auth/verify + - key: LITELLM_AUTH_VERIFY_URL + sync: false # Referenced by config.yaml as os.environ/OPENAI_API_KEY for the upstream dial. - key: OPENAI_API_KEY sync: false