v0.0.365

Changelog

• 7786bbe grpc: add -grpcserver_multiplex_tls flag (#1238)
• f5e316b providers/vault: use URI like CN if base_domain is provided (#1240)
• ebc51eb wire an optional MTLS server into service registration.

v0.0.364

Changelog

• 9c3b3a2 Ensure workspace file overwrites only affect the current module.

v0.0.363

Changelog

• 9c3df6a Workspace: preliminary support for multiple workspace files. (#1239)
• 42da01f providers/vault: add provider struct (#1237)
• 4f064b9 providers/vault: return BadInputError if no CN provided for a secret

v0.0.362

Changelog

• f6dde8e providers/vault: add per env base domain config (#1236)

v0.0.361

Changelog

• 8487f73 Offer JSON output on nsc ingress list.
• e661658 add .clang-format config
• 9c263c1 auth: added hidden command check.
• 7223a6e nix: add clang-format wrapper to flake (#1233)
• cb472af provider/vault: move vault configuration to an ENV config (#1234)
• df1e9cc providers/vault: add OIDC authentication method
• 5c70917 providers/vault: cleanup redundant error check
• 7da559e providers/vault: show error from OIDC provider
• 17064a3 providers/vault: use token from env var VAULT_TOKEN if set
• 2746d46 run: add ability to pass in a set of authorized ssh keys.
• d06313f vault/certificate: add an option to provide cn and sans (#1229)
• b225aba vault: renew tokens (#1232)

v0.0.360

Changelog

• f02a0b5 1Password: add optional flag to force serial reads.
• 7097b3e Add ability to limit duration of nscloud clusters when wired as k8s providers.
• 093b81b Add debug ability to print k8s apply body on failures.
• 2282f89 Tracing: mark spans as failed if GRPC code is not ok.
• 9733169 create: allow specifying multiple ssh keys.
• ba4497c ssh: allow specifying the username to use.
• 0a68817 vault: create approle secret provider (#1230)

v0.0.359

Changelog

• 25eafcd Redirect new version notice to named output. Avoiding stdout ensures that JSON outputs can be piped.
• 3e136cc vault: Expose TlsBundle type with a few convenience methods (#1227)

v0.0.358

Changelog

• 3213bfa Retry Postgres schema application if error is a retryable Postgres serialization error.
• b3a3d0e bump go-containerregistry to v0.19.1
• 3a298c7 consolesink: allow console_output_action_id to be configurable.
• 725e116 endpoints: Prefer explicit region overwrites over primary regions from the token.
• 40b1611 providers: add vault secrets provider for TLS certificate (#1226)
• 33022de version: bump api version for changes in #1226

v0.0.357

Changelog

• 3213bfa Retry Postgres schema application if error is a retryable Postgres serialization error.
• b3a3d0e bump go-containerregistry to v0.19.1
• 3a298c7 consolesink: allow console_output_action_id to be configurable.
• 725e116 endpoints: Prefer explicit region overwrites over primary regions from the token.
• 40b1611 providers: add vault secrets provider for TLS certificate (#1226)
• 33022de version: bump api version for changes in #1226

v0.0.356

Changelog

• 710ad3e bump internal API version