rpk ai llm-provider create
Create an LLM provider.
Choose the provider-config by setting flags from one group; the group you use selects it: openai-config, anthropic-config, google-config, bedrock-config, openai-compatible-config. Setting flags from two groups is an error.
| This command was introduced in ai version 0.2.28. |
Examples
This section provides examples of how to use rpk ai llm-provider create.
rpk ai llm-provider create my-llm-provider \
--openai-config.api-key-ref OPENAI_API_KEY
Flags
| Value | Type | Description |
|---|---|---|
|
string |
Human-readable name for display in the UI. |
|
stringArray |
Model identifiers available through this provider. Leave empty to allow all models. (repeatable; name (bare values comma-split) or protojson object; replaces the full list on update). |
|
bool |
Whether this provider is active and accepting requests. (true when set; pass |
|
string |
Override the default API endpoint. Leave empty for the standard OpenAI API. |
|
string |
Secret store reference for the API key. Leave empty for no-auth endpoints (Ollama, vLLM, local models). |
|
string |
Override the default API endpoint. Leave empty for the standard Anthropic API. |
|
string |
Secret store reference for the API key. Leave empty when using authorization passthrough. |
|
bool |
Forward the client’s Authorization header to Anthropic instead of using a server-side API key. Used for enterprise/Max plan OAuth passthrough. (true when set; pass |
|
string |
Override the default API endpoint. Leave empty for the standard Google AI API. |
|
string |
Secret store reference for the Google AI API key. |
|
string |
AWS region where the Bedrock endpoint is deployed. (required in its group) (alias: |
|
string |
Override the default Bedrock endpoint URL. Leave empty for the standard regional endpoint. |
|
string |
Secret store reference for the AWS access key ID. (required in its group) (alias: |
|
string |
Secret store reference for the AWS secret access key. (required in its group) (alias: |
|
string |
ARN of the IAM role to assume for Bedrock access. (required in its group) (alias: |
|
string |
External ID for cross-account role assumption. Required when the role’s trust policy mandates it. |
|
string |
Session name for CloudTrail audit logging. |
|
string |
Override the default API endpoint. Leave empty for the standard OpenAI API. |
|
string |
Secret store reference for the API key. Leave empty for no-auth endpoints (Ollama, vLLM, local models). |
|
bool |
Capture full request bodies ( |
|
bool |
Capture full response bodies ( |
|
string |
Name of a Guardrail to attach to this provider. Leave empty for no guardrail. For Bedrock provider the guardrail uses AWS Bedrock Guardrail directly. For all other providers the proxy evaluates user input against the Bedrock Guardrail’s standalone backend. In both cases a guardrail intervention short-circuits the request. |
|
stringArray |
Tags. (repeatable key=value; replaces the full map on update). (New in 0.2.33) |
|
string |
manifest to create from (YAML or JSON; "-" for stdin); flags override file values. |
|
bool |
print the request that would be sent (with the computed update mask) and exit without calling the server. |
|
stringArray |
per-model pricing override in USD per million tokens ( |
Global flags
| Value | Type | Description |
|---|---|---|
|
string |
Redpanda or |
|
stringArray |
Override |
|
bool |
Ignore |
|
string |
|
|
bool |
Enable verbose logging. |