v1.14.2

Changelog

If you're using nctl auth set-project in CI with an APIServiceAccount you'll need to update the command to run nctl auth set-project --force.

Details

Until v1.14.0 nctl auth set-project would set a project without verifying if the user has access to that project in the first place. This led to confusion for users and therefore we introduced an error and suggestions how to verify which projects a user belongs to.

In some cases, nctl is unable to verify if it has access to a project and would always throw an error:

1. When using an APIServiceAccount in a sub-project.
2. When using an APIServiceAccount without organizational access.

The nctl auth set-project --force flag allows you to override these checks and set a project anyway.

What's Changed

• fix: allow to force setting a project even if it can't be listed by @thde in #357

Full Changelog: v1.14.1...v1.14.2

v1.14.1

Changelog

• Fixes a bug when updating the CORS for an S3 bucket. Flags that were not passed on update would default to false. This has been fixed so that only passed options are changed.

What's Changed

• fix(bucket): preserve cors config on update by @thde in #356

Full Changelog: v1.14.0...v1.14.1

v1.14.0

Changelog

• Adds suggestions and available options to different errors:

  ❯ nctl get postgresdatabase
   ✗ No "PostgresDatabases" found 💥
  
  Project: ninetest
  
  Suggested actions:
    - List all PostgresDatabases in your organization: nctl get postgresdatabases --all-projects
  

• Adds new application sizes: standard-2 and standard-4
• Improves project switching: If set-project cannot find the project in the current organization, it tries the user's other organizations from the token and switches to the one where the project exists.
• Exposes project details in yaml and json output.
• Adds the possibility to configure backup schedules for databases:

  nctl update postgresdatabase my-db --backup-schedule=daily

• Improves autocomplete for projects.

What's Changed

• feat(autocomplete): use selected project for autocompleting resources by @thde in #336
• feat(errors): add suggestions and options to errors by @thde in #349
• feat: add standard-4 application size by @gajicdev in #345
• feat: switch organization when project is in another org by @SaadAssaf in #327
• feat: expose project specs in yaml/json output by @coorasse in #339
• feat: add backup schedule flag for economy databases by @skyfox14 in #335
• refactor: replace ObjectsBucket usage with Bucket by @pawelkuc in #309
• fix: fallback to COMP_LINE for project parsing by @thde in #338
• docs: improve readme by @thde in #347
• refactor: rename header from NAME to APP NAME by @schmijos in #346
• refactor: configure output centrally, allow testing output by @thde in #348
• refactor: split up utils package by @thde in #353
• build(deps): update dependencies by @thde in #332
• build(goreleaser): update config keys by @thde in #337
• build(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 by @dependabot[bot] in #343
• build(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 by @dependabot[bot] in #340
• build(deps): bump github.com/grafana/loki/v3 from 3.6.3 to 3.6.4 by @dependabot[bot] in #341
• build(deps): update dependencies by @thde in #350
• build(deps): bump crate-ci/typos from 1.41.0 to 1.43.5 by @dependabot[bot] in #354
• build(deps): update to go1.26 by @thde in #355
• test: align test patterns by @thde in #351

New Contributors

• @coorasse made their first contribution in #339
• @schmijos made their first contribution in #346
• @skyfox14 made their first contribution in #335

Full Changelog: v1.13.1...v1.14.0

v1.13.1

What's Changed

• fix: add serviceconnections alias for get serviceconnection by @thomhug in #329
• fix: unable to create postgresdatabase: location not allowed, available locations: [nine-cz41 nine-cz42 nine-es34] by @thde in #331

Full Changelog: v1.13.0...v1.13.1

v1.13.0

Changelog

• Adds mysql, mysqldatabase, postgres and postgresdatabase as service connection destinations.
• Allows version selection for new opensearch clusters.
• Improves the bucket update message.
• Updates dependencies including API defaults.

What's Changed

• build(deps): bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #305
• build(deps): bump crate-ci/typos from 1.35.8 to 1.39.0 by @dependabot[bot] in #304
• build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #297
• build(deps): bump github.com/charmbracelet/bubbletea from 1.3.6 to 1.3.10 by @dependabot[bot] in #292
• ci: fail if modernize check fails by @thde in #306
• build(deps): bump github.com/int128/kubelogin from 1.34.0 to 1.34.1 by @dependabot[bot] in #291
• add destinations by @olknegate in #308
• feat: allow OpenSearch version selection on creation by @shieldwed in #310
• build(deps): bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in #318
• build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #317
• build(deps): bump github.com/prometheus/common from 0.67.2 to 0.67.4 by @dependabot[bot] in #316
• build(deps): bump k8s.io/kubectl from 0.34.1 to 0.34.2 by @dependabot[bot] in #312
• build(deps): bump crate-ci/typos from 1.39.0 to 1.40.0 by @dependabot[bot] in #319
• build(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 by @dependabot[bot] in #314
• fix: improve Bucket update message by @pawelkuc in #311
• fix: add new destinations by @olknegate in #320
• build(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #322
• build(deps): bump crate-ci/typos from 1.40.0 to 1.41.0 by @dependabot[bot] in #321
• build(deps): bump github.com/alecthomas/kong from 1.12.1 to 1.13.0 by @dependabot[bot] in #323
• build(deps): bump k8s.io/client-go from 0.34.2 to 0.35.0 by @dependabot[bot] in #326

New Contributors

• @shieldwed made their first contribution in #310

Full Changelog: v1.12.3...v1.13.0

v1.12.3

What's Changed

• fix bucketuser credentials get by @gajicdev in #302
• fix: bucket deletion by @pawelkuc in #303

Full Changelog: v1.12.2...v1.12.3

v1.12.2

What's Changed

• allow to set reverse DNS for cloudVMs by @thirdeyenick in #284
• add bucketuser crud by @gajicdev in #283
• fix: add missing BucketUser vars by @ctrox in #285
• fix: remove duplicate verified app hosts by @ctrox in #286
• adding flags and new funcions for the sensitive fields by @SaadAssaf in #269
• feat(opensearch): add support to disable public networking and bucket users on creation by @thde in #287
• tests(get): revert regex testing by @thde in #289
• return an empty env var slice instead of nil by @thirdeyenick in #290
• feat: add optional health probe configuration by @pawelkuc in #298
• feat: add CRUD commands for bucket resources. by @pawelkuc in #288

Full Changelog: v1.12.1...v1.12.2

v1.12.1

What's Changed

• feat: use token claims when logging in with ASA by @ctrox in #281
• fix: initial watch list formatting by @ctrox in #268
• feat: improve client_credentials login error by @ctrox in #282

Full Changelog: v1.12.0...v1.12.1

v1.12.0

Changelog

• nctl create apiserviceaccount --organization-access: API service accounts with organization wide access can now be created. These service accounts need to be created in the default project and will get access to all projects within the organization.
• nctl auth login --api-client-id=<client-id> --api-client-secret=<client-secret>: The login command has been extended to support logging in with v2 API service accounts. All newly created service accounts automatically use the new version.

What's Changed

• refactor: simplify command selection without API client by @ctrox in #270
• feat: add OrganizationAccess flag to ASA by @ctrox in #278
• build(deps): bump github.com/charmbracelet/bubbletea from 1.3.5 to 1.3.6 by @dependabot[bot] in #276
• build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #272
• build(deps): bump crate-ci/typos from 1.34.0 to 1.35.7 by @dependabot[bot] in #271
• feat: APIServiceAccount v2 integration by @ctrox in #279
• feat(opensearch): support for snapshot bucket management by @josi19 in #280

v1.11.0

Changelog

• nctl get <resource> --watch: Keeps nctl running after getting the resource while watching the specified for changes. This also works in combination with output options such as yaml, json.
• nctl get/create/update/delete opensearch (Beta): Manage an OpenSearch cluster. These new resources are currently in beta and documentation is still in the works.
• nctl get <resource> --print-ca-cert: Prints the ca certificate in PEM format. Available for mysql, postgres, mysqldatabase, postgresdatabase, keyvaluestore and opensearch.

What's Changed

• build: update dependencies by @josi19 in #259
• feat: add watch flag to get commands by @ctrox in #254
• feat: print ca certificate by @thde in #258
• refactor(database): improve secret handling by @thde in #260
• feat: add opensearch resource by @josi19 in #266
• chore: update dependencies by @ctrox in #267

Full Changelog: v1.10.0...v1.11.0