ai-workspace-lab/xworkspace-console
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(macos): source litellm salt key + DB password from shared token

Browse Source 
litellm_salt_key and litellm_database_password default to /root password-file
lookups, which are empty on macOS, so the 'Materialize persisted LiteLLM
secrets' assert fails. In the Darwin block, pass both from UNIFIED_AUTH_TOKEN
(same shared-secret approach as postgresql_admin_password). Linux unchanged.
This commit is contained in:
Haitao Pan 2026-06-19 03:10:44 +00:00
parent 87c9a18f61
commit 0e6f71a84e
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
scripts/setup-ai-workspace-all-in-one.sh
View File

@ -2309,6 +2309,12 @@ if [ "$(detect_os)" = "darwin" ]; then
# /root/.ai_workspace_postgres_password lookup is never attempted.
ANSIBLE_EXTRA_VARS+=("-e" "postgresql_deploy_mode=native")
append_secret_var "postgresql_admin_password" "$UNIFIED_AUTH_TOKEN"
# LiteLLM persists its salt key and DB password under /root by default, which
# is unreadable/unwritable on macOS, so the "Materialize persisted LiteLLM
# secrets" assert sees empty values. Source them from the shared token, like
# the other services on macOS.
append_secret_var "litellm_salt_key" "$UNIFIED_AUTH_TOKEN"
append_secret_var "litellm_database_password" "$UNIFIED_AUTH_TOKEN"
else
LINUX_CONSOLE_USER="$(linux_default_console_user)"
LINUX_CONSOLE_HOME="$(linux_default_console_home "$LINUX_CONSOLE_USER")"