mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-23 00:41:40 +00:00
891da2372d
The cron host has no write access to BerriAI/litellm-docs by design. PRs now open from a long-lived fork at agent-shin/litellm-docs: - run_daily.sh validates AGENT_SHIN_GITHUB_TOKEN up front (failing 30 min into a run because the env file is missing one line is wasted spend). - The pre-commit shim adds a transient `fork` remote with the token embedded in the URL, force-pushes the branch, then removes the remote so the token never lives on disk. - `gh pr create --head agent-shin:<branch>` opens the cross-repo PR with GH_TOKEN scoped to AGENT_SHIN_GITHUB_TOKEN. A second `gh pr edit --add-reviewer` runs under GITHUB_TOKEN (mateo-berri's PAT) because agent-shin's PAT lacks RequestReviewsByLogin permission on the upstream repo. - PR_REVIEWERS env var (default `mateo-berri`) controls who gets auto-tagged; empty disables. Also bring litellm-compat-matrix.service to working state: - Hardcode `/home/mateo` paths everywhere %h was used. systemd expands %h against the *manager's* home (/root for PID 1) in *system* units, not against the User= directive. The mismatch made ReadWritePaths point at /root/.cache and the namespace setup failed with status=226/NAMESPACE before run_daily.sh ever started. - Explicit Environment=PATH so `uv` and `claude` under ~/.local/bin are visible to the up-front command-presence check; systemd's default PATH excludes them. - Expand ReadWritePaths to include ~/.claude (CLI per-session state) and ~/.config/gh (gh host config fallback); both are written under ProtectHome=read-only. env.example refreshed: drop AWS_ACCESS_KEY_ID/SECRET + GOOGLE_APPLICATION_CREDENTIALS in favor of AWS_BEARER_TOKEN_BEDROCK and ADC via the VM's metadata server; document AGENT_SHIN_GITHUB_TOKEN, FORK_OWNER/FORK_REPO overrides, and VERTEXAI_LOCATION=global.
50 lines
1.9 KiB
Text
50 lines
1.9 KiB
Text
# Environment file consumed by `litellm-compat-matrix.service`.
|
|
#
|
|
# Install at `/etc/litellm-compat-matrix.env` and chmod 0600.
|
|
# `EnvironmentFile=-` in the unit means the service is allowed to start
|
|
# even if this file is missing, but the populator will fail at the
|
|
# first provider request without these credentials.
|
|
|
|
# Anthropic
|
|
ANTHROPIC_API_KEY=
|
|
|
|
# Bedrock (invoke + converse columns).
|
|
# Use Anthropic's Bedrock API-key passthrough (long-lived bearer token).
|
|
# No AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY required for the matrix --
|
|
# both the LiteLLM invoke and converse routes pick up
|
|
# AWS_BEARER_TOKEN_BEDROCK when present.
|
|
AWS_BEARER_TOKEN_BEDROCK=
|
|
AWS_REGION_NAME=us-east-1
|
|
|
|
# Vertex AI.
|
|
# On the GCP VM, the default service-account ADC from the metadata server
|
|
# is used -- no JSON key file is needed. If you ever need to run outside
|
|
# GCP, also export GOOGLE_APPLICATION_CREDENTIALS=/path/to/sa.json.
|
|
VERTEXAI_PROJECT=
|
|
VERTEXAI_LOCATION=global
|
|
|
|
# Microsoft Foundry (Azure column)
|
|
AZURE_FOUNDRY_API_KEY=
|
|
AZURE_FOUNDRY_API_BASE=
|
|
|
|
# REQUIRED for publishing: PAT for the `agent-shin` user, used to push
|
|
# the daily compat-matrix branch to its fork (agent-shin/litellm-docs)
|
|
# and open the cross-repo PR against BerriAI/litellm-docs. Scopes:
|
|
# classic `repo` + `workflow`, or fine-grained on agent-shin/litellm-docs
|
|
# with Contents:RW + Pull requests:RW + Workflows:RW.
|
|
# Skip by setting SKIP_PUBLISH=1 (publishes nothing; only writes the
|
|
# matrix JSON locally).
|
|
AGENT_SHIN_GITHUB_TOKEN=
|
|
|
|
# Optional: lifts the unauthenticated rate limit on the GitHub Releases
|
|
# API used by `resolver.py`. Any token works (read-only). Not required.
|
|
# GITHUB_TOKEN=
|
|
|
|
# Optional overrides; defaults are sensible for the cron VM.
|
|
# PROXY_PORT=4100
|
|
# LITELLM_WORKTREE=/home/mateo/litellm-cron-worktree
|
|
# DOCS_REPO=BerriAI/litellm-docs
|
|
# DOCS_BRANCH=main
|
|
# DOCS_TARGET_PATH=src/data/compatibility-matrix.json
|
|
# FORK_OWNER=agent-shin
|
|
# FORK_REPO=agent-shin/litellm-docs
|