litellm/helm/litellm/templates
mateo-berri 5c213127e8 feat(proxy): authenticate to Azure Postgres with Microsoft Entra ID tokens
Azure Database for PostgreSQL Flexible Server takes a Microsoft Entra ID access
token as the connection password, and those tokens last about an hour, so a
proxy pointed at one dies shortly after boot unless something keeps minting
fresh ones

Set AZURE_POSTGRESQL_AUTH=True (or pass --azure_postgresql_auth) alongside
DATABASE_HOST, DATABASE_USER, and DATABASE_NAME, and the proxy mints a token at
startup, assembles the connection URL around it, and refreshes it in the
background for as long as the process runs. That is the same shape
IAM_TOKEN_DB_AUTH already had for AWS RDS, so the two now share one code path:
a tagged union picks the minting strategy once, and the wrapper, the read
replica, and the refresh loop all read the choice off it instead of each
guessing from the environment. Setting both toggles is a startup error, in the
chart as well as in Python

The helm chart gets database.writer.useAzureEntraAuth and the matching reader
knob next to the existing useIAMAuth

Fixes #29661

Co-authored-by: David Balatoni <balcsida@gmail.com>
2026-08-20 11:50:16 -07:00
..
backend feat(helm): add startupProbe and hpa.behavior to the componentized chart (#36382) 2026-08-14 16:53:10 -07:00
gateway feat(helm): add startupProbe and hpa.behavior to the componentized chart (#36382) 2026-08-14 16:53:10 -07:00
ui feat(helm): add startupProbe and hpa.behavior to the componentized chart (#36382) 2026-08-14 16:53:10 -07:00
_helpers.tpl feat(proxy): authenticate to Azure Postgres with Microsoft Entra ID tokens 2026-08-20 11:50:16 -07:00
ingress.yaml fix(passthrough): dispatch Comprehend Medical logging on the provider tag only 2026-08-17 17:07:31 -07:00
migrations-job.yaml fix(helm): bound the migrations Job so a blocked migration cannot stall the release 2026-08-14 14:03:49 -07:00
NOTES.txt feat(helm): add per-component PodDisruptionBudget and topologySpreadConstraints to componentized chart (#33430) 2026-07-16 10:41:59 -07:00
serviceaccount.yaml feat(helm): split per-component ServiceAccounts for gateway, backend, and UI (#28712) 2026-05-28 13:20:53 -07:00