Releases: kyma-project/cli
0.0.0-dev
3.4.0
What's changed
Highlights
Added kyma alpha dashboard to run the Busola UI locally in Docker.
Added kyma alpha authorize for OIDC-based RBAC setup.
Added kyma alpha diagnose with logs and Istio analysis. CLI binary is now built with FIPS enabled.
New Features
- Kyma Dashboard (
kyma alpha dashboard): new command to run Busola locally in Docker, with start/stop support and kubeconfig injection - Alpha authorize: new
kyma alpha authorizecommand with RBAC validation, dry-run support, custom required claims, and repository flag as required claim - Alpha module catalog/pull: new commands for browsing and pulling community modules; support for
--remoteflag and custom repository locations - Diagnose: new
kyma alpha diagnose logs(with strict mode) andkyma alpha diagnose istiocommands - Kubeconfig generate: support for
--server+--certificate-authority/--certificate-authority-dataflags; new--id-token-auto-refreshflag
Full Changelog: 3.3.1...3.4.0
3.3.1
What's Changed
- 🍒 Fixed channels display for module catalog command (#2814) by @musztardem in #2825
Full Changelog: 3.3.0...3.3.1
3.3.0
What's Changed
Highlights
Here are the highlights of the 3.3.0 release:
Community module management improvements
- Pull the latest community module templates (e.g., docker-registry) into the default namespace:
kyma module pull docker-registry
- Install a community module from a pulled template (with a default CR):
kyma module add default/docker-registry-0.10.0 --default-cr
- Remove an installed community module:
kyma module delete default/docker-registry-0.10.0
- Note: Behavior changes for community modules — see Breaking Changes.
New “authorize” command group (alpha)
- Grant access for users, groups, subaccounts, and GitHub repositories to your Kyma cluster in one step.
- Discover options:
kyma alpha authorize --help
Day 2 diagnostics (alpha)
- Module/component error logs:
kyma alpha diagnose logs --help
- Istio mesh configuration analysis (programmatic equivalent of istioctl analyze):
kyma alpha diagnose istio --help
New Features 🚀
- Added kyma alpha authorize command by @musztardem in #2655
- Revamp app push --mount flags by @Cortey in #2649
- Improved listing and removal of community modules by @musztardem in #2663
- Support the
--contextflag by @pPrecel in #2666 - Configure securityContext for the app push deployment by @pPrecel in #2662
- Return latest community module when flag --version is not specified by @MichalKalke in #2677
- Added diagnose logs command by @musztardem in #2667
- Diagnose istio by @anoipm in #2743
- Allow passing server and ca to kubeconfig generate by @halamix2 in #2708
- Implemented alpha authorize command for a single subject by @musztardem in #2712
Breaking Changes
- flags
--originand--communityare no longer functional when managing community modules. - Adding/deleting community modules require pointing to a module template (pulled earlier) as command argument in the format
<namespace>/<module-template-name>
Documentation 📖
- Document more app push possibilities by @pPrecel in #2645
- Improve examples for the
addanddeletecommands by @pPrecel in #2750 - Add examples for the the
hana mapcommand by @pPrecel in #2739 - Add examples for the
addanddeletecommands by @pPrecel in #2737
Maintenance 🏗️
- Standarize extensions output by @pPrecel in #2672
- gomod(deps): bump the docker group with 2 updates by @dependabot[bot] in #2644
- gomod(deps): bump istio.io/client-go from 1.27.1 to 1.27.2 by @dependabot[bot] in #2647
- Build cli with FIPS enabled by @halamix2 in #2648
- Fix installing community modules from rawManifests by @musztardem in #2656
- Generate .ts sidebar file by @pPrecel in #2658
- Generate docs by @pPrecel in #2657
- gomod(deps): bump istio.io/client-go from 1.27.2 to 1.27.3 by @dependabot[bot] in #2659
- Migrate the
_sidebar.mdfile by @pPrecel in #2664 - module list: return state of non-default CR by @halamix2 in #2665
- Move the
format.gofile by @pPrecel in #2669 - Use SERVICE_BINDING_ROOT env only on proper flag call by @Cortey in #2668
- Implement standard output package by @pPrecel in #2671
- fix: module list for community modules with multiple CRs by @halamix2 in #2673
- Use the
outpackage in whole cli by @pPrecel in #2674 - Stop using the
os.Stdoutand theos.Stderrby @pPrecel in #2678 - Stop generating hidden flags by @pPrecel in #2679
- Improved RBAC validations for repository authorization by @musztardem in #2676
- Verify docs and code by @pPrecel in #2680
- Use semver lib to find latest release version by @MichalKalke in #2681
- Fix verify checkout by @pPrecel in #2683
- Fix verify permissions by @pPrecel in #2684
- Add no validation message on verify by @pPrecel in #2685
- Fix action negation by @pPrecel in #2686
- Improve verify action by @pPrecel in #2688
- gomod(deps): bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.4.0 by @dependabot[bot] in #2690
- Prefix adjustments for OIDC and bindings generation by @musztardem in #2691
- Improve out message for the verify action by @pPrecel in #2692
- Fix action by @pPrecel in #2694
- Update action by @pPrecel in #2695
- Share reason between steps using file by @pPrecel in #2696
- Improve verify action message by @pPrecel in #2700
- Improve verify comment 2 by @pPrecel in #2701
- Allow verify action to continue on error by @pPrecel in #2702
- Add set to verify last step by @pPrecel in #2703
- Adds hint message when creating OIDC for clusterRole without required… by @musztardem in #2706
- Remove (optional) from pull description by @MichalKalke in #2705
- Fix installing default CR by @MichalKalke in #2707
- Show EventTime like Kubernetes age by @MichalKalke in #2711
- remove rubbish line by @halamix2 in #2715
- gomod(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.8 to 6.6.9 by @dependabot[bot] in #2710
- Fix for generating name for RBACs on OIDC trust generation by @musztardem in #2714
- Fix github OIDC trust test by @kwiatekus in #2716
- gomod(deps): bump github.com/opencontainers/selinux from 1.12.0 to 1.13.0 by @dependabot[bot] in #2717
- gomod(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.0 to 6.7.1 by @dependabot[bot] in #2722
- gomod(deps): bump istio.io/client-go from 1.27.3 to 1.28.0 by @dependabot[bot] in #2721
- gomod(deps): bump the docker group with 2 updates by @dependabot[bot] in #2720
- Migrate to new flag by @kwiatekus in #2719
- Improve hints while adding community module by @pPrecel in #2723
- Add a hint in a case where user misues a command by @Cortey in #2724
- Split module disabling logic into two separate funcs by @pPrecel in #2725
- Improved the dry-run flag for authorization commands by @musztardem in #2718
- gomod(deps): bump github.com/docker/cli from 28.5.2+incompatible to 29.0.2+incompatible in the docker group by @dependabot[bot] in #2727
- gomod(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.1 to 6.7.2 by @dependabot[bot] in #2728
- gomod(deps): bump the k8s-io group with 3 updates by @dependabot[bot] in #2726
- Support passing community module location using arguments by @pPrecel in #2735
- Support removing direct community module without passing the
--communityflag by @pPrecel in #2736 - Unify examples by @pPrecel in #2738
- Add debug log for action configuration by @pPrecel in #2741
- Improved help for diagnose logs command by @musztardem in #2729
- gomod(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 by @dependabot[bot] in #2730
- gomod(deps): bump github.com/docker/cli from 29.0.2+incompatible to 29.0.3+incompatible in the docker group by @dependabot[bot] in #2746
- gomod(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.2 to 6.7.5 by @dependabot[bot] in https://github.com/kyma-pr...
3.2.0
What's Changed
New Features
- Differentiate between cluster-wide and namespaced kubeconfig generation by @kwiatekus in #2603
- Make cluster-/role binding optional when generating kubeconfig by @kwiatekus in #2605
- Support use of nullable types in flags by @Cortey in #2604
- Create alpha diagnose command by @musztardem in #2600
- Extend diagnose command by @musztardem in #2637
- Rework kyma module catalog by @FilipRudy in #2631
- Updated module add command to handle module origin by @musztardem in #2633
- Add shorthand -n for --namespace flag by @kwiatekus in #2623
- Enable machine-friendly execution of app push command by @kwiatekus in #2636
- Support custom envs for the
app pushcommand by @pPrecel in #2635 - Added command for pulling community modules by @musztardem in #2634
Documentation
- Update docs with no-alpha commands by @pPrecel in #2498
- Update docs after moving the
app pushcommand out of thealphagroup by @pPrecel in #2515 - Update Kyma CLI tutorials by @grego952 in #2581
- Document
--env*flags for theapp pushcommand by @pPrecel in #2638
Maintenance
- Move the
portforwardpackage to the internal level by @pPrecel in #2573 - Ignore extension commands with wrong action name by @pPrecel in #2576
- Extract generic pod operations from registry pkg by @pPrecel in #2578
- Skip arguments validation for extension subcommands by @musztardem in #2579
- Improve registry config error message by @kwiatekus in #2575
- Return error when action is not supported by @pPrecel in #2588
- Implement the
call_files_to_saveaction by @pPrecel in #2585 - Fix resource_get name header by @pPrecel in #2591
- Describe cluster-call action by @pPrecel in #2586
- Make use of instructions defined in extensions API for function_init by @musztardem in #2596
- gomod(deps): bump istio.io/client-go from 1.27.0 to 1.27.1 by @dependabot[bot] in #2584
- gomod(deps): bump the k8s-io group with 3 updates by @dependabot[bot] in #2598
- gomod(deps): bump the docker group with 2 updates by @dependabot[bot] in #2583
- Support output message for the
call_files_to_saveaction by @pPrecel in #2599 - Support Nullable Flags v2 by @Cortey in #2608
- Check permission prior to reading gateway by @kwiatekus in #2611
- Cover case when flag has empty (not nil) default value by @pPrecel in #2609
- Cover case when the
current-contextis missing by @pPrecel in #2601 - Add node usage info from metrics API to diagnostic data by @musztardem in #2610
- Fix typo by @FilipRudy in #2614
- Dont default istio-inject flag to true for app push command by @Cortey in #2618
- Update diagnose command to gather warnings from all namespaces by @musztardem in #2619
- Allow basic functions to be used by CLI Extensions by @Cortey in #2620
- gomod(deps): bump the docker group with 2 updates by @dependabot[bot] in #2630
- The
app pushminor fixes by @pPrecel in #2640 - strict env format by @pPrecel in #2641
Full Changelog: 3.1.2...3.2.0
3.1.2
What's Changed
Bugfixes
- Check permission prior to reading gateway (#2611) by @kwiatekus in #2612
- Cover case when the
current-contextis missing (#2601) by @kwiatekus in #2613
Full Changelog: 3.1.1...3.1.2
3.1.1
What's Changed
- Charry-pick: Ignore extension commands with wrong action name by @pPrecel in #2577
- cherry-pick: Skip arguments validation for extension subcommands (#2579) by @musztardem in #2582
- Cherry-pick: Return error when action is not supported (#2588) by @pPrecel in #2589
- Cherry-Pick: Fix resource get name header 3.1 by @pPrecel in #2592
- Make use of instructions defined in extensions API for function_init (#2596) by @musztardem in #2597
Full Changelog: 3.1.0...3.1.1
3.1.0
What's Changed
Highlights
- With the 3.1.0 version, you can manage the lifecycle of Kyma community modules: discovering, installing, and removing them from Kyma environments
- Command groups
module,app, and commands originating from cli extensions are moved out from thealphagroup
New Features
Community Modules Support:
You can now discover and add available community-driven modules:
kyma module catalog
NAME AVAILABLE VERSIONS COMMUNITY
...
cap-operator 0.15.0 true
docker-registry 0.9.0 true
kyma module add docker-registry --community --default-cr
Warning:
You are about to install a community module.
Community modules are not officially supported and come with no binding Service Level Agreement (SLA).
There is no guarantee of support, maintenance, or compatibility.
Are you sure you want to proceed with the installation? [Y/n]: Y
docker-registry community module enabled
Kubeconfig Generation for selected OIDC configuration:
We have added a command to generate kubeconfig files for named openidconnects.authentication.gardener.cloud resources.
kubectl get openidconnects.authentication.gardener.cloud
NAME
oath0
kyma alpha kubeconfig generate --oidc-name oath0 --output=/tmp/oauth0.yaml
Kubeconfig saved to: /tmp/oauth0.yaml
Support for scripting and automations:
- Many commands now support the
--outputflag, allowing you to format command results (e.g., as YAML or JSON). - Enhanced dry-run support lets you preview changes before applying them, improving safety and transparency.
kyma function create test --runtime nodejs22 --dry-run -oyaml > test-fn.yaml
kubectl apply -f test-fn.yaml
function.serverless.kyma-project.io/test created
Some Command Groups moved out of alpha group:
Several commands have been moved out of the alpha group as we continue with API stabilisation:
kyma module --help
kyma app push --help
kyma {extension} --help, for example kyma function --help
Bugfixes
- Added deduplication to unmanaged core modules listing by @musztardem in #2569
- Added community modules existence validation by @musztardem in #2572
- Fixed module CR calculation for unmanaged module by @musztardem in #2535
Documentation
- Document how to install stable cli by @pPrecel in #2431
- Add tip how to enable autocompletion by @kwiatekus in #2423
- Explain v3 on main readme by @kwiatekus in #2434
- Change first usage example by @kwiatekus in #2433
- Brew installation guide by @pPrecel in #2435
- Document CLI extensibility by @pPrecel in #2472
- Update OS docs based on SKR docs by @grego952 in #2489
Maintenance
- Fix stable release script by @pPrecel in #2432
- Implement actionCommands functionality by @pPrecel in #2438
- Migrate coreCommands to actionCommands by @pPrecel in #2441
- gomod(deps): bump istio.io/client-go from 1.25.0 to 1.25.1 by @dependabot[bot] in #2440
- gomod(deps): bump github.com/buildpacks/pack from 0.36.4 to 0.37.0 by @dependabot[bot] in #2430
- Bump @sap/hana-client from 2.19.20 to 2.21.31 in /tests/btp/sample-http-db-nodejs/hdi-deploy in the npm_and_yarn group across 1 directory by @dependabot[bot] in #2421
- gomod(deps): bump the k8s-io group with 3 updates by @dependabot[bot] in #2415
- Get rid of the
coreCommandsby @pPrecel in #2442 - Migrate CRUD templateCommands into actionCommands by @pPrecel in #2443
- gomod(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 in the go_modules group by @dependabot[bot] in #2429
- New extensions API by @pPrecel in #2444
- Refactor kymaconfig by @pPrecel in #2446
- Purge old extensions by @pPrecel in #2445
- Refactor actions by @pPrecel in #2448
- Refactor parameters by @pPrecel in #2449
- Extensions types by @pPrecel in #2450
- New extensions functionality by @pPrecel in #2451
- Test extensions validation by @pPrecel in #2453
- Common package for extension errors by @pPrecel in #2454
- Tests for the
internal/extensions/args.gofile by @pPrecel in #2455 - Tests for the
internal/extensions/flag.gofile by @pPrecel in #2456 - Tests for the
internal/extensions/commands.gofile by @pPrecel in #2457 - Improve the extensions building functionality by @pPrecel in #2458
- Add tests for the errors package by @pPrecel in #2459
- Test the
extensions.gofile by @pPrecel in #2461 - Move the
configuratorto common pkg by @pPrecel in #2469 - Revert extensions config path concept by @pPrecel in #2462
- Add toArray and toEnvs functions by @pPrecel in #2470
- gomod(deps): bump istio.io/client-go from 1.25.1 to 1.25.2 by @dependabot[bot] in #2471
- gomod(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in the go_modules group by @dependabot[bot] in #2464
- Add the
toYamlfunction by @pPrecel in #2478 - Add extensibility tutorial by @pPrecel in #2477
- allow using token in kubeconfig generate in GH Actions by @halamix2 in #2480
- Test for generating access for trusted GH OIDC by @kwiatekus in #2484
- Implement the --output flag for the
modulecommands group by @pPrecel in #2493 - Generate documentation by @pPrecel in #2494
- Migrate repo to commands out of the alpha group by @pPrecel in #2497
- bump linter by @anoipm in #2499
- Support the
aarch64and theamd64architectures by @pPrecel in #2502 - Secure the pull pipeline by @pPrecel in #2503
- Installation script default dir by @pPrecel in #2504
- Include istio label in the deployment template by @kwiatekus in #2506
- gomod(deps): bump istio.io/client-go from 1.25.2 to 1.26.1 by @dependabot[bot] in #2501
- Generate private file for the
registry configcommand by @pPrecel in #2508 - Get rid of the
go-www-aithenticate-parserpackage by @pPrecel in #2509 - Protect filenames and ask for configmation when output dir is out of working directory by @pPrecel in #2510
- gomod(deps): bump the k8s-io group with 3 updates by @dependabot[bot] in #2476
- gomod(deps): bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 in the go_modules group by @dependabot[bot] in #2512
- Update e2e tests by @pPrecel in #2517
- Add Community Module by @musztardem in #2507
- Reuse prompt package by @pPrecel in #2518
- Set value from file even when file is empty by @pPrecel in #2524
- Fix getting unserved docker registries by @FilipRudy in #2526
- Delete community modules by @musztardem in #2528
- gomod(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in the go_modules group by @dependabot[bot] in #2525
- gomod(deps): bump istio.io/client-go from 1.26.1 to 1.26.2 by @dependabot[bot] in #2521
- gomod(deps): bump the k8s-io group with 3 updates by @dependabot[bot] in #2520
- Community modules improvements by @musztardem in #2530
- Module CR and installation status in module list command by @musztardem in #2529
- Added prompt for module deletion by @musztardem in #2531
- gomod(deps): bump github.com/jedib0t/go-pretty/v6 fro...
3.0.1
3.0.0
What's Changed
Highlights
We are proud to bring the first stable v3 version of Kyma CLI.
This version becomes the first milestone of redesigning Kyma CLI to match expectations (expressed via kyma-project/community#872) for it to become a tool for application developers who use kyma as their k8s-based runtime.
Many commands in the deprecated v2 version were removed in v3 as they were out of the scope of the repurposed goal of Kyma CLI.
We introduced a completely new set of commands that are more oriented on simplifying and automating the steps required in the application development process in Kyma. Those are all in the alpha command group, as their final API will need some fine-tuning after we receive more feedback.
The new feature highlights are the following:
- code-to-app capability; automates the process of getting a running app from your source code
- Hands-on interaction with those custom resources defined by Kyma and its modules (Function CR and ServiceInstance/Binding CRs as first ones. Expect more really soon)
- Enabling easy automation for some common tasks developers usually do on k8s clusters (for example, generating new access for service accounts)
Get started here 🎯
All Changes
For a complete changelog, please review the release candidates of the 3.0.0 release:
https://github.com/kyma-project/cli/releases/tag/3.0.0-rc1
https://github.com/kyma-project/cli/releases/tag/3.0.0-rc2
New Contributors
- @c-pius made their first contribution in #1971
- @janmedrek made their first contribution in #1974
- @FilipRudy made their first contribution in #2316
Full Changelog: 2.20.5...3.0.0