---
page_title: "ona_runner_llm_integration Resource - ona"
subcategory: "Runners"
description: |-
  Ona runner LLM integration. Use this resource to configure BYOK access for LLM models on a customer-managed runner.
---

# ona_runner_llm_integration (Resource)

Ona runner LLM integration. Use this resource to configure BYOK access for LLM models on a customer-managed runner.

For product context, see [Model access](https://ona.com/docs/ona/agents/llm-providers/overview) and [OpenAI BYOK](https://ona.com/docs/ona/agents/llm-providers/openai).

## Example Usage

```terraform
resource "ona_runner_llm_integration" "bedrock_mantle" {
  runner_id = ona_runner.aws_primary.runner_id

  models = [
    "sonnet_4",
    "sonnet_4_extended",
  ]

  endpoint        = "https://bedrock-mantle.us-east-1.api.aws"
  api_key         = var.bedrock_mantle_token
  api_key_version = "2026-07-14"
  max_tokens      = 8000
}

resource "ona_runner_llm_integration" "openai_compatible" {
  runner_id = ona_runner.aws_primary.runner_id

  models = [
    "openai_auto",
  ]

  endpoint        = "https://api.openai.com/v1"
  api_key         = var.openai_api_key
  api_key_version = "2026-07-14"
}
```

<!-- schema generated by tfplugindocs -->
## Schema

### Required

- `models` (Set of String) Supported LLM models for this integration. Supported values are `haiku_4_5`, `openai_4o`, `openai_4o_mini`, `openai_auto`, `openai_o1`, `openai_o1_mini`, `opus_4`, `opus_4_extended`, `opus_4_5`, `opus_4_5_extended`, `opus_4_6`, `opus_4_6_extended`, `opus_4_7`, `opus_4_8`, `sonnet_3_5`, `sonnet_3_7`, `sonnet_3_7_extended`, `sonnet_4`, `sonnet_4_extended`, `sonnet_4_5`, `sonnet_4_5_extended`, `sonnet_4_6`, `sonnet_4_6_extended`, and `sonnet_5`.
- `runner_id` (String) Runner ID this LLM integration belongs to. Changing this value replaces the integration.

### Optional

> **NOTE**: [Write-only arguments](https://developer.hashicorp.com/terraform/language/resources/ephemeral#write-only-arguments) are supported in Terraform 1.11 and later.

- `api_key` (String, Sensitive, [Write-only](https://developer.hashicorp.com/terraform/language/resources/ephemeral#write-only-arguments)) LLM provider API key. This write-only value is sent to Ona but is not stored in Terraform plan or state. Required when creating an integration or rotating the API key.
- `api_key_version` (String) User-managed version marker for resubmitting `api_key` during rotation. Increment or otherwise change this value when supplying a new API key.
- `enabled` (Boolean) Whether the LLM integration is enabled. Defaults to `true`.
- `endpoint` (String) LLM provider endpoint URL. The value must not include leading or trailing whitespace.
- `max_tokens` (Number) Maximum number of tokens a single LLM provider request may generate. Set to `0` to use the model default.

### Read-Only

- `id` (String) LLM integration ID.
- `llm_provider` (String) LLM provider family inferred by Ona from the configured models. Supported values are `anthropic` and `openai`.

## Import

Import is supported using the following syntax:

The [`terraform import` command](https://developer.hashicorp.com/terraform/cli/commands/import) can be used, for example:

```shell
#!/usr/bin/env sh

terraform import ona_runner_llm_integration.bedrock_mantle 01980ed3-a090-7b5b-a74c-9bf5d8cfe53c
```