From 3e0bd71ee933957610bd6faeda4e800420f5e8ed Mon Sep 17 00:00:00 2001
From: ryan-crabbe-berri <ryan@berri.ai>
Date: Wed, 1 Jul 2026 10:25:32 -0700
Subject: [PATCH] feat(ui): disclaim that the Update API Key modal only rotates
 api_key (#31805)

* feat(ui): disclaim that the Update API Key modal only rotates api_key

An adversarial review of the credential-rotation work noted the modal always
writes litellm_params.api_key, so models that authenticate with an Azure AD
token, AWS credentials, or a Vertex service-account JSON are not rotated by it.
Adds a warning Alert to the modal so users are not misled into thinking those
secrets were rotated; broadening the modal to those providers is a follow-up

* Update ui/litellm-dashboard/src/components/update_model_credentials_modal.tsx

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

* style(ui): prettier-format the credential modal

---------

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
---
 .../src/components/update_model_credentials_modal.tsx | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/ui/litellm-dashboard/src/components/update_model_credentials_modal.tsx b/ui/litellm-dashboard/src/components/update_model_credentials_modal.tsx
index 238207a4aa8..b98f0ec3242 100644
--- a/ui/litellm-dashboard/src/components/update_model_credentials_modal.tsx
+++ b/ui/litellm-dashboard/src/components/update_model_credentials_modal.tsx
@@ -1,4 +1,4 @@
-import { Button, Form, Input, Modal, Typography } from "antd";
+import { Alert, Button, Form, Input, Modal, Typography } from "antd";
 import { useState } from "react";
 import { modelPatchUpdateCall } from "./networking";
 import NotificationsManager from "./molecules/notifications_manager";
@@ -56,8 +56,15 @@ export default function UpdateModelCredentialsModal({
   return (
     <Modal title="Update API Key" open={open} onCancel={close} footer={null} width={520} destroyOnHidden={true}>
       <Text className="block mb-4 text-gray-500">
-        Rotate this model&apos;s API key. Only the new key is sent; the rest of the deployment is left untouched.
+        Update this model&apos;s API key. Only the new key is sent; the rest of the deployment configuration is left
+        untouched.
       </Text>
+      <Alert
+        type="warning"
+        showIcon
+        className="mb-4"
+        message="Only the API key is rotated here. Models that authenticate with an Azure AD token, AWS credentials, or a Vertex service-account JSON aren't supported yet; update those from the model's LiteLLM Params for now."
+      />
       <Form form={form} onFinish={handleSubmit} layout="vertical">
         <Form.Item label="New API Key" name="api_key" rules={[{ required: true, message: "Enter a new API key" }]}>
           <Input.Password placeholder="Enter the new API key" autoComplete="new-password" />