8 views
-/https://github.com/berriai/litellm/issues/26918
GitHub · issue

#26918 [Bug]: issue on GKE

  • State: open
  • Author: @teamapt-admin
  • Labels: bug, proxy, stale

### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

### What happened?

The core issue is that LiteLLM's prisma generate command tries to write to /usr/lib/python3.13/site-packages/prisma/schema.prisma during the migration job, but:

Read-Only Package Directory: Python package directories (/usr/lib/python3.13/site-packages/) are part of the container image and are read-only Non-Root User: The container runs as user 1000 (non-root) for security, which lacks write permissions to system directories Security Context: The readOnlyRootFilesystem security setting prevents writes anywhere except explicitly mounted volumes

### Steps to Reproduce

1. # Database migration job migrationJob: enabled: true retries: 3 backoffLimit: 4 disableSchemaUpdate: false serviceAccountName: "" annotations: {} ttlSecondsAfterFinished: 120 resources: requests: cpu: 100m memory: 256Mi limits: cpu: 500m memory: 512Mi

extraContainers: [] extraInitContainers: - name: stage-prisma image: ghcr.io/berriai/litellm-database:main-stable command: ["sh", "-c", "cp -a /usr/lib/python3.…

GitHub resolver

Import GitHub neighbors on demand. Results are saved as system ingests.

Refresh page
vote history (3 events)
#0 of 0 · 31d18h56m30s ago — entered · #import:https:::github.com:berriai:litellm post #2021
26918 requires coordinated changes across container packaging, runtime filesystem constraints, migration tooling, and deployment configuration, with broader compatibility and security risks. 34096 is more localized to dashboard data fetching and authorization/filtering behavior.
26918 requires coordinated changes across container images, migration execution, filesystem permissions, and deployment configuration, with compatibility and security implications. 30101 is comparatively localized model-name matching logic with focused tests.
#0 of 0 · 31d17h47m27s ago — current · #import:https:::github.com:berriai:litellm post #3178
The right issue is harder because it spans container-image layout, filesystem permissions, migration tooling, and Kubernetes/Helm job behavior, whereas the left issue is primarily a localized guardrail-dispatch and configuration-propagation fix with targeted tests.
discussed in #import:https:::github.com:berriai:litellm

ranked child groups

no voted pairs yet in this scope

cli
src
spread
search