mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-05 02:41:56 +00:00
key_alias can become the secret name used by external secret manager integrations (HashiCorp Vault, CyberArk Conjur) when store_virtual_keys is enabled. Add raise_if_unsafe_secret_name, a shared validation check applied unconditionally before a secret name reaches either integration or the /key/generate, /key/update, and /key/regenerate API boundary, independent of the existing enable_key_alias_format_validation opt-in flag. Also hardens the Vault URL builder to percent-encode reserved characters in secret_name (preserving "/" and "@"), and switches the Conjur policy body to a real YAML serializer instead of raw string interpolation. |
||
|---|---|---|
| .. | ||
| aws_secret_manager.py | ||
| aws_secret_manager_v2.py | ||
| base_secret_manager.py | ||
| custom_secret_manager_loader.py | ||
| cyberark_secret_manager.py | ||
| get_azure_ad_token_provider.py | ||
| google_kms.py | ||
| google_secret_manager.py | ||
| hashicorp_secret_manager.py | ||
| main.py | ||
| Readme.md | ||
| secret_manager_handler.py | ||
Supported Secret Managers to read credentials from
Example read OPENAI_API_KEY, AZURE_API_KEY from a secret manager