mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-10 22:41:41 +00:00
b0041f32a2
The generated masterkey Secret rendered a fresh randAlphaNum value on every release, so any helm upgrade with masterkeySecretName and masterkey unset rotated the master key and invalidated every client holding the old one. Look up the existing Secret in the release namespace and reuse its value, falling back to a random key only on first install. Co-authored-by: yassin <yassin@berri.ai> Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
12 lines
463 B
YAML
12 lines
463 B
YAML
{{- if not .Values.masterkeySecretName }}
|
|
{{- $secretName := printf "%s-masterkey" (include "litellm.fullname" .) }}
|
|
{{- $existing := lookup "v1" "Secret" .Release.Namespace $secretName }}
|
|
{{- $masterkey := .Values.masterkey | default (dig "data" "masterkey" "" $existing | b64dec) | default (printf "sk-%s" (randAlphaNum 18)) }}
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: {{ $secretName }}
|
|
data:
|
|
masterkey: {{ $masterkey | b64enc }}
|
|
type: Opaque
|
|
{{- end }}
|