Litellm dev 01 10 2025 p2 (BerriAI#7679)

* test(test_basic_python_version.py): assert all optional dependencies are marked as extras on poetry

Fixes BerriAI#7677

* docs(secret.md): clarify 'read_and_write' secret manager usage on aws

* docs(secret.md): fix doc

* build(ui/teams.tsx): add edit/delete button for updating user / team membership on ui

allows updating user role to admin on ui

* build(ui/teams.tsx): display edit member component on ui, when edit button on member clicked

* feat(team_endpoints.py): support updating team member role to admin via api endpoints

allows team member to become admin post-add

* build(ui/user_dashboard.tsx): if team admin - show all team keys

Fixes BerriAI#7650

* test(config.yml): add tomli to ci/cd

* test: don't call python_basic_testing in local testing (covered by python 3.13 testing)

.circleci/config.yml

@@ -105,7 +105,7 @@ jobs:
           command: |
             pwd
             ls
-            python -m pytest -vv tests/local_testing --cov=litellm --cov-report=xml -x --junitxml=test-results/junit.xml --durations=5 -k "not test_python_38.py and not router and not assistants and not langfuse and not caching and not cache" -n 4
+            python -m pytest -vv tests/local_testing --cov=litellm --cov-report=xml -x --junitxml=test-results/junit.xml --durations=5 -k "not test_python_38.py and not test_basic_python_version.py and not router and not assistants and not langfuse and not caching and not cache" -n 4
           no_output_timeout: 120m
       - run:
           name: Rename the coverage files
@@ -895,6 +895,7 @@ jobs:
             pip install "pytest-retry==1.6.3"
             pip install "pytest-asyncio==0.21.1"
             pip install "pytest-cov==5.0.0"
+            pip install "tomli==2.2.1"
       - run:
           name: Run tests
           command: |

README.md

@@ -358,7 +358,7 @@ poetry install -E extra_proxy -E proxy
 Step 3: Test your change:
 
 ```
-cd litellm/tests # pwd: Documents/litellm/litellm/tests
+cd tests # pwd: Documents/litellm/litellm/tests
 poetry run flake8
 poetry run pytest .
 ```

docs/my-website/docs/secret.md

@@ -72,6 +72,20 @@ general_settings:
     prefix_for_stored_virtual_keys: "litellm/" # OPTIONAL. If set, this prefix will be used for stored virtual keys in the secret manager
     access_mode: "write_only" # Literal["read_only", "write_only", "read_and_write"]
 ```
+</TabItem>
+<TabItem value="read_and_write" label="Read + Write Keys with AWS Secret Manager">
+
+```yaml
+general_settings:
+  master_key: os.environ/litellm_master_key 
+  key_management_system: "aws_secret_manager" # 👈 KEY CHANGE
+  key_management_settings: 
+    store_virtual_keys: true # OPTIONAL. Defaults to False, when True will store virtual keys in secret manager
+    prefix_for_stored_virtual_keys: "litellm/" # OPTIONAL. If set, this prefix will be used for stored virtual keys in the secret manager
+    access_mode: "read_and_write" # Literal["read_only", "write_only", "read_and_write"]
+    hosted_keys: ["litellm_master_key"] # OPTIONAL. Specify which env keys you stored on AWS
+```
+
 </TabItem>
 </Tabs>
 
@@ -186,34 +200,6 @@ LiteLLM stores secret under the `prefix_for_stored_virtual_keys` path (default:
 
 
 ## Azure Key Vault
-<!-- 
-### Quick Start
-
-```python 
-### Instantiate Azure Key Vault Client ###
-from azure.keyvault.secrets import SecretClient
-from azure.identity import ClientSecretCredential
-
-# Set your Azure Key Vault URI
-KVUri = os.getenv("AZURE_KEY_VAULT_URI")
-
-# Set your Azure AD application/client ID, client secret, and tenant ID - create an application with permission to call your key vault
-client_id = os.getenv("AZURE_CLIENT_ID") 
-client_secret = os.getenv("AZURE_CLIENT_SECRET")
-tenant_id = os.getenv("AZURE_TENANT_ID") 
-
-# Initialize the ClientSecretCredential
-credential = ClientSecretCredential(client_id=client_id, client_secret=client_secret, tenant_id=tenant_id)
-
-# Create the SecretClient using the credential
-client = SecretClient(vault_url=KVUri, credential=credential)
-
-### Connect to LiteLLM ###
-import litellm
-litellm.secret_manager = client
-
-litellm.get_secret("your-test-key")
-``` -->
 
 #### Usage with LiteLLM Proxy Server