scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-02 02:11:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 101

feat(cloud-agents): add Prisma migration for AgentVMConfig/Secret/Worker tables

Browse source
This commit is contained in:
Ishaan Jaffer 2026-05-06 15:00:50 -07:00
parent 469fae0bb5
commit 8655092d50
No known key found for this signature in database
1 changed files with 80 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

80
litellm-proxy-extras/litellm_proxy_extras/migrations/20260506220000_add_cloud_agent_settings_tables/migration.sql Normal file
View file

@ -0,0 +1,80 @@
-- Cloud Agents settings (Epic G / LIT-2891).
--
-- Adds four tables that back the new Settings -> Cloud Agents UI:
-- * LiteLLM_AgentVMConfig -- per-team provider, AWS BYOC, warm pool, network access
-- * LiteLLM_AgentSecret -- per-team encrypted secrets, write-only on read
-- * LiteLLM_AgentWorker -- self-hosted worker registrations
-- * LiteLLM_AgentWorkerPairingToken -- single-use 15-min pairing tokens
--
-- Encryption uses the existing nacl/SecretBox path in
-- litellm.proxy.common_utils.encrypt_decrypt_utils — no new KMS infra here.
-- Values are stored base64-encoded; raw secrets are NEVER returned from any
-- GET endpoint (LIT-2891 validation #2).
CREATE TABLE IF NOT EXISTS "LiteLLM_AgentVMConfig" (
"team_id" TEXT PRIMARY KEY,
"provider" TEXT NOT NULL DEFAULT 'disabled',
"aws_auth_method" TEXT,
"aws_access_key_id_enc" TEXT,
"aws_secret_access_key_enc" TEXT,
"aws_role_arn_enc" TEXT,
"aws_region" TEXT,
"ami_id" TEXT,
"instance_type" TEXT,
"subnet_id" TEXT,
"security_group_id" TEXT,
"iam_instance_profile" TEXT,
"use_spot" BOOLEAN NOT NULL DEFAULT TRUE,
"max_session_minutes" INTEGER NOT NULL DEFAULT 120,
"warm_pool_enabled" BOOLEAN NOT NULL DEFAULT FALSE,
"warm_pool_size" INTEGER NOT NULL DEFAULT 0,
"max_idle_minutes" INTEGER NOT NULL DEFAULT 30,
"hydrate_transport" TEXT NOT NULL DEFAULT 'auto',
"network_access" JSONB NOT NULL DEFAULT '{"mode":"allow_all","allowlist":[]}'::jsonb,
"self_hosted_enabled" BOOLEAN NOT NULL DEFAULT FALSE,
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
"updated_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP
);
CREATE TABLE IF NOT EXISTS "LiteLLM_AgentSecret" (
"id" TEXT PRIMARY KEY,
"team_id" TEXT NOT NULL,
"name" TEXT NOT NULL,
"value_enc" TEXT NOT NULL,
"scope" JSONB NOT NULL DEFAULT '"all"'::jsonb,
"type" TEXT NOT NULL DEFAULT 'env',
"file_path" TEXT,
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
"updated_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
"created_by" TEXT
);
CREATE UNIQUE INDEX IF NOT EXISTS "LiteLLM_AgentSecret_team_id_name_key"
ON "LiteLLM_AgentSecret" ("team_id", "name");
CREATE INDEX IF NOT EXISTS "LiteLLM_AgentSecret_team_id_idx"
ON "LiteLLM_AgentSecret" ("team_id");
CREATE TABLE IF NOT EXISTS "LiteLLM_AgentWorker" (
"id" TEXT PRIMARY KEY,
"team_id" TEXT NOT NULL,
"hostname" TEXT NOT NULL,
"status" TEXT NOT NULL DEFAULT 'offline',
"last_seen_at" TIMESTAMP(3),
"cpu_pct" DOUBLE PRECISION,
"mem_gb" DOUBLE PRECISION,
"active_sessions" INTEGER NOT NULL DEFAULT 0,
"worker_jwt_hash" TEXT NOT NULL,
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP
);
CREATE INDEX IF NOT EXISTS "LiteLLM_AgentWorker_team_id_status_idx"
ON "LiteLLM_AgentWorker" ("team_id", "status");
CREATE TABLE IF NOT EXISTS "LiteLLM_AgentWorkerPairingToken" (
"token_hash" TEXT PRIMARY KEY,
"team_id" TEXT NOT NULL,
"created_by" TEXT NOT NULL,
"expires_at" TIMESTAMP(3) NOT NULL,
"used_at" TIMESTAMP(3),
"created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP
);
CREATE INDEX IF NOT EXISTS "LiteLLM_AgentWorkerPairingToken_team_id_idx"
ON "LiteLLM_AgentWorkerPairingToken" ("team_id");