mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-23 00:41:40 +00:00
b87d1f8dad
* fix(bedrock): respect s3_region_name for batch file uploads (#23569) * fix(bedrock): respect s3_region_name for batch file uploads (GovCloud fix) * fix: s3_region_name always wins over aws_region_name for S3 signing (Greptile feedback) * fix: _filter_headers_for_aws_signature - Bedrock KB (#23571) * fix: _filter_headers_for_aws_signature * fix: filter None header values in all post-signing re-merge paths Addresses Greptile feedback: None-valued headers were being filtered during SigV4 signing but re-merged back into the final headers dict afterward, which would cause downstream HTTP client failures. Made-with: Cursor * feat(router): tag_regex routing — route by User-Agent regex without per-developer tag config (#23594) * feat(router): add tag_regex support for header-based routing Adds a new `tag_regex` field to litellm_params that lets operators route requests based on regex patterns matched against request headers — primarily User-Agent — without requiring per-developer tag configuration. Use case: route all Claude Code traffic (User-Agent: claude-code/x.y.z) to a dedicated deployment by setting: tag_regex: - "^User-Agent: claude-code\\/" in the deployment's litellm_params. Works alongside existing `tags` routing; exact tag match takes precedence over regex match. Unmatched requests fall through to deployments tagged `default`. The matched deployment, pattern, and user_agent are recorded in `metadata["tag_routing"]` so they flow through to SpendLogs automatically. * fix(tag_regex): address backwards-compat, metadata overwrite, and warning noise Three issues from code review: 1. Backwards-compat: `has_tag_filter` was widened to activate on any non-empty User-Agent, which would raise ValueError for existing deployments using plain tags without a `default` fallback. Fix: only activate header-based regex filtering when at least one candidate deployment has `tag_regex` configured. 2. Metadata overwrite: `metadata["tag_routing"]` was overwritten for every matching deployment in the loop, leaving inaccurate provenance when multiple deployments match. Fix: write only for the first match. 3. Warning noise: an invalid regex pattern logged one warning per header string rather than once per pattern. Fix: compile first (catching re.error once), then iterate over header strings. Also adds two new tests covering these cases, and adds docs page for tag_regex routing with a Claude Code walk-through. * refactor(tag_regex): remove unnecessary _healthy_list copy * docs: merge tag_regex section into tag_routing.md, remove standalone page - Add ## Regex-based tag routing (tag_regex) section to existing tag_routing.md instead of a separate page - Remove tag_regex_routing.md standalone doc (odd UX to have a separate page for a sub-feature) - Remove proxy/tag_regex_routing from sidebars.js - Add match_any=False debug warning in tag_based_routing.py when regex routing fires under strict mode (regex always uses OR semantics) * fix(tag_regex): address greptile review - security docs, strict-mode enforcement, validation order - Strengthen security note in tag_routing.md: explicitly state User-Agent is client-supplied and can be set to any value; frame tag_regex as a traffic classification hint, not an access-control mechanism - Move tag_regex startup validation before _add_deployment() so an invalid pattern never leaves partial router state - Enforce match_any=False strict-tag policy: when a deployment has both tags and tag_regex and the strict tag check fails, skip the regex fallback rather than silently bypassing the operator's intent - Extract per-deployment match logic into _match_deployment() helper to keep get_deployments_for_tag() readable - Add two new tests: strict-mode blocks regex fallback, regex-only deployment still matches under match_any=False * fix(ci): apply Black formatting to 14 files and stabilize flaky caplog tests - Run Black formatter on 14 files that were failing the lint check - Replace caplog-based assertions in TestAliasConflicts with unittest.mock.patch on verbose_logger.warning for xdist compatibility - The caplog fixture can produce empty text in pytest-xdist workers in certain CI environments, causing flaky test failures Co-authored-by: Ishaan Jaff <ishaan-jaff@users.noreply.github.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Ishaan Jaff <ishaan-jaff@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| guardrails | ||
| ui | ||
| access_control.md | ||
| access_groups.md | ||
| admin_ui_sso.md | ||
| ai_hub.md | ||
| alerting.md | ||
| architecture.md | ||
| arize_phoenix_prompts.md | ||
| auto_routing.md | ||
| billing.md | ||
| budget_reset_and_tz.md | ||
| caching.md | ||
| call_hooks.md | ||
| cli.md | ||
| cli_sso.md | ||
| clientside_auth.md | ||
| config_management.md | ||
| config_settings.md | ||
| configs.md | ||
| control_plane_and_data_plane.md | ||
| cost_tracking.md | ||
| credential_usage_tracking.md | ||
| custom_auth.md | ||
| custom_pricing.md | ||
| custom_prompt_management.md | ||
| custom_root_ui.md | ||
| custom_sso.md | ||
| customer_routing.md | ||
| customer_usage.md | ||
| customers.md | ||
| db_deadlocks.md | ||
| db_info.md | ||
| debugging.md | ||
| deleted_keys_teams.md | ||
| deploy.md | ||
| docker_quick_start.md | ||
| dynamic_logging.md | ||
| dynamic_rate_limit.md | ||
| email.md | ||
| embedding.md | ||
| endpoint_activity.md | ||
| enterprise.md | ||
| error_diagnosis.md | ||
| fallback_management.md | ||
| forward_client_headers.md | ||
| health.md | ||
| image_handling.md | ||
| ip_address.md | ||
| jwt_auth_arch.md | ||
| keys_teams_router_settings.md | ||
| litellm_managed_files.md | ||
| litellm_prompt_management.md | ||
| load_balancing.md | ||
| logging.md | ||
| logging_spec.md | ||
| managed_batches.md | ||
| managed_finetuning.md | ||
| management_cli.md | ||
| master_key_rotations.md | ||
| metrics.md | ||
| model_access.md | ||
| model_access_groups.md | ||
| model_access_guide.md | ||
| model_compare_ui.md | ||
| model_discovery.md | ||
| model_management.md | ||
| multi_tenant_architecture.md | ||
| multiple_admins.md | ||
| native_litellm_prompt.md | ||
| oauth2.md | ||
| pagerduty.md | ||
| pass_through.md | ||
| pass_through_guardrails.md | ||
| perf.md | ||
| pricing_calculator.md | ||
| prod.md | ||
| project_management.md | ||
| prometheus.md | ||
| prompt_management.md | ||
| provider_budget_routing.md | ||
| provider_discounts.md | ||
| provider_margins.md | ||
| public_routes.md | ||
| public_teams.md | ||
| pyroscope_profiling.md | ||
| quick_start.md | ||
| rate_limit_tiers.md | ||
| realtime_webrtc.md | ||
| reject_clientside_metadata_tags.md | ||
| release_cycle.md | ||
| reliability.md | ||
| request_headers.md | ||
| request_tags.md | ||
| response_headers.md | ||
| rules.md | ||
| security_encryption_faq.md | ||
| self_serve.md | ||
| service_accounts.md | ||
| shared_health_check.md | ||
| spend_logs_deletion.md | ||
| sync_anthropic_beta_headers.md | ||
| sync_models_github.md | ||
| tag_budgets.md | ||
| tag_routing.md | ||
| team_based_routing.md | ||
| team_budgets.md | ||
| team_logging.md | ||
| team_model_add.md | ||
| temporary_budget_increase.md | ||
| timeout.md | ||
| token_auth.md | ||
| ui.md | ||
| ui_credentials.md | ||
| ui_logs.md | ||
| ui_logs_sessions.md | ||
| ui_project_management.md | ||
| ui_spend_log_settings.md | ||
| ui_store_model_db_setting.md | ||
| ui_team_soft_budget_alerts.md | ||
| user_keys.md | ||
| user_management_heirarchy.md | ||
| user_onboarding.md | ||
| users.md | ||
| veo_video_generation.md | ||
| virtual_keys.md | ||
| worker_startup_hooks.md | ||