Add idempotent LiteLLM SSM secret provisioning #634

New issue

Closed

opened 2026-07-24 21:01:19 +00:00 by coilyco-ops · 0 comments

coilyco-ops commented

2026-07-24 21:01:19 +00:00

Member

Parent: #629

Outcome

Provide one reusable, guarded command that creates the three LiteLLM runtime secrets without printing or tracking their values.

Acceptance

The command preserves existing parameters and creates only missing values.
New values use SecureString and cryptographic randomness.
The master key has LiteLLM's required sk- prefix.
The immutable salt key and Postgres password remain stable across reruns.
The command uses the guarded AWS operator surface, never bare AWS writes.
Repository validation passes.

The parent remains open for the attended Mac-local converge and observed evaluation.

Parent: #629 ## Outcome Provide one reusable, guarded command that creates the three LiteLLM runtime secrets without printing or tracking their values. ## Acceptance * The command preserves existing parameters and creates only missing values. * New values use SecureString and cryptographic randomness. * The master key has LiteLLM's required `sk-` prefix. * The immutable salt key and Postgres password remain stable across reruns. * The command uses the guarded AWS operator surface, never bare AWS writes. * Repository validation passes. The parent remains open for the attended Mac-local converge and observed evaluation.

coilysiren referenced this issue from a commit

2026-07-24 21:04:45 +00:00

Add LiteLLM secret provisioning

coilysiren closed this issue

2026-07-24 21:04:45 +00:00

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

coilyco-flight-deck/infrastructure#634

No description provided.

Rows
Columns