FilesExpand file tree

main

/

x509_workload_identity.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

41 lines (31 loc) · 1.24 KB

main

/

x509_workload_identity.py

Copy path

Top

File metadata and controls

• Code
• Blame

41 lines (31 loc) · 1.24 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

from __future__ import annotations

import os

import ssl

from openai import OpenAI, DefaultHttpx2Client

from openai.auth import x509_workload_identity

def create_client() -> OpenAI:

mode = os.getenv("OPENAI_AUTH_MODE", "api_key")

if mode == "api_key":

return OpenAI()

if mode != "x509":

raise ValueError("OPENAI_AUTH_MODE must be 'api_key' or 'x509'")

tls_context = ssl.create_default_context(cafile=os.getenv("OPENAI_MTLS_CA_BUNDLE"))

tls_context.load_cert_chain(

certfile=os.environ["OPENAI_MTLS_CERTIFICATE_CHAIN"],

keyfile=os.environ["OPENAI_MTLS_PRIVATE_KEY"],

password=os.getenv("OPENAI_MTLS_PRIVATE_KEY_PASSWORD"),

)

return OpenAI(

workload_identity=x509_workload_identity(

identity_provider_id=os.environ["OPENAI_IDENTITY_PROVIDER_ID"],

service_account_id=os.environ["OPENAI_SERVICE_ACCOUNT_ID"],

),

base_url=os.getenv("OPENAI_BASE_URL"),

http_client=DefaultHttpx2Client(verify=tls_context, follow_redirects=False),

)

def main() -> None:

with create_client() as client:

response = client.responses.create(model="gpt-5.5", input="Hello!")

print(response.output_text)

if __name__ == "__main__":

main()