8 views
-/https://github.com/berriai/litellm/issues/33321
GitHub · issue

#33321 [Bug]: team, end-user, tag, and model budgets admit requests at the exact limit

  • State: open
  • Author: @emerzon
  • Labels: proxy

### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate

### What happened?

Hard-budget checks use different boundary operators for the same product concept on current `litellm_internal_staging` at commit `65ca095d4d15a82372e53a547a2390a69f7e1797`

Key, user, organization, and centralized team-member checks reject when current spend is equal to the configured maximum by using `>=`

The following active checks admit at equality:

| Scope | Current condition | Result when spend == max | | --- | --- | --- | | Team | `spend > team_object.max_budget` | admitted | | End user | `end_user_spend > end_user_budget` | admitted | | Tag | continue while `tag_spend <= max_budget` | admitted | | Virtual-key model | `_current_spend > max_budget` | admitted | | End-user model | `_current_spend > max_budget` | admitted |

Relevant code:

- [team check](https://github.com/BerriAI/litellm/blob/65ca095d4d15a82372e53a547a2390a69f7e1797/litellm/proxy/auth/auth_checks.py#L3881-L3928) - [end-user check](https://github.com/BerriAI/litellm/blob/65ca095d4d15a82372e53a547a2390a69f7e1797/litellm/proxy/auth/auth_checks.py#L1080-L1096) - [tag check](h…

GitHub resolver

Import GitHub neighbors on demand. Results are saved as system ingests.

Refresh page
vote history (3 events)
#0 of 0 · 31d18h19m9s ago — entered · #import:https:::github.com:berriai:litellm post #2739
33321 spans multiple authorization paths and requires coordinated logic changes plus broad regression testing, while 26783 is a narrower deployment/configuration investigation.
Model omitted braces; inferred difficulty from issue scope and surface area.
#0 of 0 · 31d17h55m45s ago — current · #import:https:::github.com:berriai:litellm post #3151
#33321 is harder because it spans several proxy authorization paths, requires consistent boundary semantics across scopes, and needs broad regression coverage; #30099 is comparatively localized to provider-response usage translation with a narrower compatibility fix.
discussed in #import:https:::github.com:berriai:litellm

ranked child groups

no voted pairs yet in this scope

cli
src
spread
search