Skip to content

Latest commit

 

History

History
221 lines (143 loc) · 8.55 KB

CHANGELOG.md

File metadata and controls

221 lines (143 loc) · 8.55 KB

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog. This project adheres to Semantic Versioning with the exception of version 0 as we find our footing. Only changes to the application should be logged here. Repository maintenance, tests, and other non application changes should be excluded.

[Unreleased] - yyyy-mm-dd

Version unreleased adds support for Firefox Containers integration. This feature allows users to open multiple AWS accounts in the same browser window.

Added

  • Added .kion.yml keys to enable Firefox Containers integration

Changed

Deprecated

Removed

Fixed

[0.7.0] - 2024.09.18

Version 0.7.0 adds flag support to console federation, addresses a bug that presented when using paths with AWS IAM roles, and adds a method for keeping your Kion password in encrypted storage (eg the system keyring).

Added

Fixed

[0.6.0] - 2024-08-01

Version 0.6.0 adds support for account aliases coming in Kion 3.9.9 and 3.10.2. Account aliases are globally unique user defined identifiers for accounts stored in Kion. Aliases can be used with the stak and run commands instead of specifying account numbers.

Added

[0.5.0] - 2024-06-24

This release changes how caching is handled for Gnome users. After upgrading a new empty cache in the default login keyring will be used. The old kion-cli keyring can be safely removed.

Changed

  • Updated keyring config for Gnome Wallet (libsecret) to use the default login keyring [kionsoftware/pull/49]

[0.4.1] - 2024-06-24

Fixed

  • Patched the package github.com/dvsekhvalnov/jose2go to version 1.6.0 to address Dependabot security findings [kionsoftware/pull/48]

[0.4.0] - 2024-06-18

SAML Authentication is now supported for Kion versions < 3.8.0. No additional configuration is required for use, see README.md for details on SAML authentication with the CLI.

Added

  • A new version constraint will switch between SAML authentication behaviors based on the target Kion version. [kionsoftware/pull/46]

[0.3.0] - 2024-06-03

You can now use Kion CLI with multiple instances of Kion through the use of configuration profiles or by pointing to alternate configuration files. Here are some usage examples:

# point to another configuration file
KION_CONFIG=~/.kion.development.yml kion stak

# use a 'development' profile within your ~/.kion.yml configuration file
kion --profile development fav sandbox

A configuration file for the profile usage example above would look something like this:

# default profile if none specified
kion:
  url: https://kion.mycompany.com
  api_key: "app_123"
favorites:
  - name: production
    account: "232323232323"
    cloud_access_role: ReadOnly

# alternate profiles called with the global `--profile [name]` flag
profiles:
  development:
    kion:
      url: https://dev.kion.mycompany.com
      api_key: "app_abc"
    favorites:
      - name: sandbox
        account: "121212121212"
        cloud_access_role: Admin

Added

Fixed

  • Corrected an issue where the Kion CLI configuration file was not actually optional [kionsoftware/pull/42]

[0.2.1] - 2024-05-30

Changed

  • Federating into the web console is now handled without iframes or javascript [kionsoftware/pull/40]

[0.2.0] - 2024-05-24

Caching and AWS credential_process support has been added to the Kion CLI! See the AWS docs HERE for more information as well as the README.md document in this repo for examples on how to use Kion CLI as a credential provider.

Kion CLI will now use cached STAKs by default to improve performance and reduce the number of calls to Kion. STAKs will be considered as valid for 15 minutes unless Kion reports back a longer STAK duration. Note that Kion is expected to start returning the duration of a STAK along with the STAK itself starting on versions 3.6.29, 3.7.19, 3.8.13, and 3.9.5.

The cache will be stored in the system's keychain, and depending on your operating system, you may be prompted to allow Kion CLI to access the cache entry on your first run.

Cached STAKs will be used by default unless:

  • Caching is disabled via the --disable-cache global flag
  • Caching is disabled in the ~/.kion.yml configuration file by setting kion.disable_cache: true
  • The credential has less than 5 seconds left and Kion CLI is being used as an AWS credential provider
  • The credential has less than 5 seconds left and Kion CLI is being used to run an ad hoc command
  • The credential has less than 5 minutes left and Kion CLI is being used to print keys
  • The credential has less than 5 minutes left and Kion CLI is being used to create an authenticated subshell
  • The credential has less than 10 minutes left and Kion CLI is being used to create an AWS configuration profile

Lastly, the following environment variables will no longer be set when using the run command to execute ad hoc commands:

KION_ACCOUNT_NUM
KION_ACCOUNT_ALIAS
KION_CAR

Added

Changed

  • Kion session data has moved from the ~/.kion.yml configuration file to the cache [kionsoftware/pull/39]

Removed

  • KION_* env variables removed from subshell environments when using the run command [kionsoftware/pull/38]

[0.1.1] - 2024-05-20

Fixed

[0.1.0] - 2024-05-20

Added

Changed

Fixed

[0.0.2] - 2024-02-23

Added

Fixed

[0.0.1] - 2024-02-02

Initial release.