litellm:
  nameOverride: litellm
  replicaCount: 1

  image:
    pullPolicy: IfNotPresent
    tag: v1.84.0

  service:
    type: ClusterIP
    port: 4000

  resources:
    requests:
      cpu: 100m
      memory: 512Mi
    limits:
      memory: 2Gi

  masterkeySecretName: litellm-secrets
  masterkeySecretKey: master-key
  environmentSecrets:
    - litellm-sso
  environmentConfigMaps:
    - litellm-env

  db:
    useExisting: true
    deployStandalone: false
    endpoint: litellm-pg-cluster-rw.litellm.svc.cluster.local
    database: litellm
    secret:
      name: litellm-pg-cluster-app
      usernameKey: username
      passwordKey: password
      endpointKey: host

  migrationJob:
    enabled: true
    hooks:
      argocd:
        enabled: false
      helm:
        enabled: false
    resources:
      requests:
        cpu: 100m
        memory: 512Mi
      limits:
        memory: 2Gi

  proxy_config:
    model_list:
      - model_name: qwen27
        litellm_params:
          model: openai/qwen27
          api_base: http://framework-llm.open-webui.svc.cluster.local:8080/v1
          api_key: not-needed
        model_info:
          mode: chat
          max_input_tokens: 131072
      - model_name: qwen122
        litellm_params:
          model: openai/qwen122
          api_base: http://framework-llm.open-webui.svc.cluster.local:8080/v1
          api_key: not-needed
        model_info:
          mode: chat
          max_input_tokens: 262144
          max_output_tokens: 16384
      - model_name: qwen122-abliterated
        litellm_params:
          model: openai/qwen122-abliterated
          api_base: http://framework-llm.open-webui.svc.cluster.local:8080/v1
          api_key: not-needed
        model_info:
          mode: chat
          max_input_tokens: 262144
          max_output_tokens: 16384
      - model_name: qwen35-4b
        litellm_params:
          model: openai/qwen35-4b
          api_base: http://framework-llm.open-webui.svc.cluster.local:8080/v1
          api_key: not-needed
        model_info:
          mode: chat
          max_input_tokens: 32768
    general_settings:
      master_key: os.environ/PROXY_MASTER_KEY
    litellm_settings:
      drop_params: true

  envVars:
    GENERIC_CLIENT_ID: litellm
    GENERIC_AUTHORIZATION_ENDPOINT: https://sso.noxxos.nl/application/o/authorize/
    GENERIC_TOKEN_ENDPOINT: https://sso.noxxos.nl/application/o/token/
    GENERIC_USERINFO_ENDPOINT: https://sso.noxxos.nl/application/o/userinfo/
    GENERIC_SCOPE: openid profile email litellm_role
    GENERIC_USER_ROLE_ATTRIBUTE: litellm_role
    PROXY_BASE_URL: https://litellm.noxxos.nl
    PROXY_LOGOUT_URL: https://sso.noxxos.nl/application/o/litellm/end-session/
    AUTO_REDIRECT_UI_LOGIN_TO_SSO: "true"
    DD_ENV: production
    DD_SERVICE: litellm
    USE_DDTRACE: "false"

  extraEnvVars:
    - name: LITELLM_SALT_KEY
      valueFrom:
        secretKeyRef:
          name: litellm-secrets
          key: salt-key

  extraResources:
    - apiVersion: v1
      kind: ConfigMap
      metadata:
        name: litellm-env
        namespace: litellm
      data:
        LITELLM_ENV: production
    - apiVersion: postgresql.cnpg.io/v1
      kind: Cluster
      metadata:
        name: litellm-pg-cluster
        namespace: litellm
      spec:
        instances: 2
        bootstrap:
          initdb:
            database: litellm
            owner: litellm
        storage:
          storageClass: local-path
          size: 10Gi
        resources:
          requests:
            cpu: 100m
            memory: 100Mi
          limits:
            memory: 512Mi
        plugins:
          - enabled: true
            name: barman-cloud.cloudnative-pg.io
            isWALArchiver: true
            parameters:
              barmanObjectName: litellm-backup-store
    - apiVersion: barmancloud.cnpg.io/v1
      kind: ObjectStore
      metadata:
        name: litellm-backup-store
        namespace: litellm
      spec:
        retentionPolicy: "30d"
        configuration:
          destinationPath: s3://cnpg-backup-litellm/
          endpointURL: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
          s3Credentials:
            accessKeyId:
              name: litellm-pg-backups
              key: AWS_ACCESS_KEY_ID
            secretAccessKey:
              name: litellm-pg-backups
              key: AWS_SECRET_ACCESS_KEY
          wal:
            compression: bzip2
          data:
            compression: bzip2
            immediateCheckpoint: true
    - apiVersion: postgresql.cnpg.io/v1
      kind: ScheduledBackup
      metadata:
        name: litellm-pg-backup
        namespace: litellm
      spec:
        method: plugin
        immediate: true
        schedule: "0 15 3 * * *"
        backupOwnerReference: self
        cluster:
          name: litellm-pg-cluster
        pluginConfiguration:
          name: barman-cloud.cloudnative-pg.io
    - apiVersion: objectbucket.io/v1alpha1
      kind: ObjectBucketClaim
      metadata:
        name: litellm-pg-backups
        namespace: litellm
      spec:
        bucketName: cnpg-backup-litellm
        storageClassName: ceph-bucket
        additionalConfig:
          maxSize: "50Gi"
    - apiVersion: gateway.networking.k8s.io/v1
      kind: HTTPRoute
      metadata:
        name: litellm
        namespace: litellm
      spec:
        parentRefs:
          - name: traefik-gateway
            namespace: traefik
            sectionName: websecure
        hostnames:
          - litellm.noxxos.nl
        rules:
          - matches:
              - path:
                  type: PathPrefix
                  value: /
            backendRefs:
              - name: litellm
                port: 4000