[I] make db rotates the Postgres password on every run (tooling-llmao)

["andrewmusselman (via GitHub)" <gi...@apache.org>]

andrewmusselman opened a new issue, #20:
URL: https://github.com/apache/tooling-llmao/issues/20

   `bin/setup_litellm_db.py:133` generates a fresh password on every invocation
   and `ALTER ROLE`s it, then prints the `database_url` for manual pasting into
   `litellm.yaml`.
    
   So running `make db` twice — or after any unrelated config edit — silently
   breaks a working `litellm.yaml`. The failure surfaces as:
    
   ```
   Authentication failed against database server at `127.0.0.1`,
   the provided database credentials for `llmao` are not valid.
   ```
    
   which points at credentials rather than at the script that changed them. The
   proxy gets far enough to register both models from YAML before dying, so the
   config looks fine.
    
   **Fix:** read the existing password out of `litellm.yaml` when one is present
   and reuse it, generating only when the role does not exist. Or write the value
   back into `litellm.yaml` rather than printing it.
    
   **Workaround:** re-run `make db` and paste the new `database_url`, or set the
   role to match the file already in place:
    
   ```bash
   sudo -u postgres psql -c "ALTER ROLE llmao PASSWORD '<from litellm.yaml>'"
   ```
    
   Not an issue under Puppet — the manifest generates the password from eyaml and
   creates the role with it, so the two cannot drift.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org