BerriAI/litellm · error · ValueError

No secret found in CyberArk Secret Manager for {secret_name}

Error message

No secret found in CyberArk Secret Manager for {secret_name}

What it means

Post-fetch check in the CyberArk branch of get_secret: the CyberArk client returned None for the given secret_name, meaning the conjur variable could not be read (missing permission or nonexistent path), so the lookup is aborted.

Source

Thrown at litellm/secret_managers/secret_manager_handler.py:138

                raise ValueError(f"No secret found in Google Secret Manager for {secret_name}")
        except Exception as e:
            print_verbose(f"An error occurred - {e}")
            raise e

    elif key_manager == KeyManagementSystem.HASHICORP_VAULT.value:
        try:
            secret = client.sync_read_secret(secret_name=secret_name)
            if secret is None:
                raise ValueError(f"No secret found in Hashicorp Secret Manager for {secret_name}")
        except Exception as e:
            print_verbose(f"An error occurred - {e}")
            raise e

    elif key_manager == KeyManagementSystem.CYBERARK.value:
        try:
            secret = client.sync_read_secret(secret_name=secret_name)
            if secret is None:
                raise ValueError(f"No secret found in CyberArk Secret Manager for {secret_name}")
        except Exception as e:
            print_verbose(f"An error occurred - {e}")
            raise e

    elif key_manager == KeyManagementSystem.CUSTOM.value:
        # Check if client is a CustomSecretManager instance
        from litellm.integrations.custom_secret_manager import CustomSecretManager

        if isinstance(client, CustomSecretManager):
            secret = client.sync_read_secret(
                secret_name=secret_name,
                optional_params=(key_management_settings.model_dump() if key_management_settings else None),
            )
            if secret is None:
                raise ValueError(f"No secret found in Custom Secret Manager for {secret_name}")
        else:
            raise ValueError(
                f"Custom secret manager client must be an instance of CustomSecretManager, got {type(client).__name__}"

View on GitHub (pinned to 77b7c6c40c)

Solutions

1. Verify the secret {secret_name} exists in CyberArk Conjur and the identity has execute/read privilege on it.

When it happens

Trigger: Thrown at litellm/secret_managers/secret_manager_handler.py:138 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of BerriAI/litellm@77b7c6c40c (2026-08-18). Data as JSON: /api/errors/b09b400bda2cee22. Report an issue: GitHub.