- 2be98c3: Adds 'cf workflow list' and 'cf workflow delete' commands.
- a6ee29d: Adds the option to list closed access requests. 'cf access list requests --closed'
- 58e73ca: Adds support for providing multiple values to the ExpectedResult configuration option for access tests, permitting testing complex access scenarios.
- 418be75: Adds support for providing a file glob to the 'cf tests run' command.
- 5c07512: Fix a typo in the access test diagnostics
- 2814893: Adds a testing command to run access and group membership tests against a Common Fate deployment. To create a test file, run 'cf tests create -f tests.yml'. To run tests, use 'cf tests run -f tests.yml'.
- d6d3599: Fixes an issue where the CLI was displaying an incorrect time for the duration to be extended by.
- edef577: Removes deprecated AWS RDS command
- dc65d83: Add list and delete integration commands
- 425f23c: Improved error message when invalid_scope error is received
- bebbc1b: Fix logic for creating profiles based on an entitlement requested with batch ensure
- 11cf3f4: Fix an issue where users were prompted continuously to enter a password when accessing the fallback file keychain in Linux.
- 30aa3c0: When requesting AWS access, the Common Fate CLI will now automatically populate your local AWS config (
~/.aws/config
by default) with a profile for the requested role. - bafde01: Adds diagnostic command to list all registered background jobs and their current status
- 68005fd: batch ensure will attempt to add a profile to ~/.aws/config for the requested target and role
- a17cfef: Fixes an issue where the --duration flag was required for each entitlement being requested
- 2c79b0d: Fixes a regression in the Keychain which meant switching contexts would require re-authenticating
- 922c95f: Adds support for specifying config sources via the CF_CONFIG_SOURCES environment variable. You can now use
CF_CONFIG_SOURCES=env
in CI environments to configure the CLI entirely via environment variables.
-
c1f0a8a: Allows environment variables to be used to configure the CLI.
-
CF_OIDC_ISSUER
: specifies the OIDC issuer -
CF_OIDC_CLIENT_ID
: specifies the OIDC client ID -
CF_OIDC_CLIENT_SECRET
: specifies the OIDC client secret -
CF_API_URL
specifies the API URL -
CF_ACCESS_URL
specifies the Access URL (the URL that the Common Fate Access service is hosted on) -
CF_AUTHZ_URL
specifies the Authz URL (the URL that the Common Fate Authz service is hosted on)
-
-
f28e678: Adds new commands for Access Simulation APIs (which are currently in beta).
cf access list approvers cf access preview user-access cf access preview entitlement-access
- 7b1e038: Shifts 'cf policyset' commands to be 'cf authz policyset'.
- 7b1e038: Adds 'cf authz policyset validate' command to validate Cedar policies
- dc6b5e3: Adds entra-relink-users command which can be used to remediate issues with entra scim configurations which cause users not to be linked correctly
- 85ede0e: added optional 'duration' flag to allow override of default access duration when using ensure request
- 37b1784: Adds 'cf authz schema get' command which will download the Cedar schema used for authorization.
- 7747009: list availabilities will now display deduplicated target roles by default
- 2dd3fc6: Adds cli command for retrying background jobs if they are retryable. Also adds timestamp to background job list command
- 1b16429: Fixes the output formatting for the 'cf deployment logs get' command.
- dd7da7d: Add command to reset entra users in the database so that they may be re-synced
- 0513f58: Adds background task diagnostic command for listing background tasks based on status and kind.
- 0513f58: Adds background task reset commands which can be use to cancel one or more background tasks.
- 0e23aaf: Add deployment diagnostics commands
- 5a925ce: Remove default value for "reason" flag on access ensure command
- 9cc163a: Revert addition of the provisioning status for grants
- 18bc17a: Apply upgrade sdk to patched version which fixes an issue with the login command failing due to a nonce mismatch error.
- 2095990: Add support for supplying and displaying request reasons
- b71eeec: bump sdk version
- 96e8000: Add the manage > deployment > logs get/watch sub commands. Assists in filtering and tailing logs for a Common Fate deployment.