Merge branch 'main' into feat/onboard-ufw

# Conflicts:
#	internal/cmd/root.go

Author: alexTiugan

.github/labeler.yml

@@ -2,79 +2,79 @@
 "domain:Access":
 - changed-files:
   - any-glob-to-any-file:
-    - "internal/cmd/alb/*"
-    - "internal/cmd/albwaf/*"
-    - "internal/cmd/cdn/*"
-    - "internal/cmd/certificates/*"
-    - "internal/cmd/loadbalancer/*"
-    - "internal/cmd/vpn/*"
+    - "internal/cmd/alb/**"
+    - "internal/cmd/albwaf/**"
+    - "internal/cmd/cdn/**"
+    - "internal/cmd/certificates/**"
+    - "internal/cmd/loadbalancer/**"
+    - "internal/cmd/vpn/**"
 # runtimes
 "domain:Runtimes":
 - changed-files:
   - any-glob-to-any-file:
-    - "internal/cmd/ske/*"
-    - "internal/cmd/scf/*"
-    - "internal/cmd/edge/*"
+    - "internal/cmd/ske/**"
+    - "internal/cmd/scf/**"
+    - "internal/cmd/edge/**"
 # support
 # no support domain sdk modules available yet
 # central services
 "domain:CentralServices":
 - changed-files:
   - any-glob-to-any-file:
-    - "internal/cmd/dns/*"
-    - "internal/cmd/git/*"
-    - "internal/cmd/intake/*"
-    - "internal/cmd/kms/*"
-    - "internal/cmd/kms/*"
-    - "internal/cmd/logs/*"
-    - "internal/cmd/modelserving/*"
-    - "internal/cmd/observability/*"
-    - "internal/cmd/rabbitmq/*"
-    - "internal/cmd/redis/*"
-    - "internal/cmd/opensearch/*"
-    - "internal/cmd/logme/*"
-    - "internal/cmd/telemetryrouter/*"
-    - "internal/cmd/telemetrylink/*"
-    - "internal/cmd/secretsmanager/*"
-    - "internal/cmd/dremio/*"
-    - "internal/cmd/modelexperiments/*"
-    - "internal/cmd/ufw/*"
-    - "internal/cmd/workflows/*"
-    - "internal/cmd/valkey/*"
+    - "internal/cmd/dns/**"
+    - "internal/cmd/git/**"
+    - "internal/cmd/intake/**"
+    - "internal/cmd/kms/**"
+    - "internal/cmd/kms/**"
+    - "internal/cmd/logs/**"
+    - "internal/cmd/modelserving/**"
+    - "internal/cmd/observability/**"
+    - "internal/cmd/rabbitmq/**"
+    - "internal/cmd/redis/**"
+    - "internal/cmd/opensearch/**"
+    - "internal/cmd/logme/**"
+    - "internal/cmd/telemetryrouter/**"
+    - "internal/cmd/telemetrylink/**"
+    - "internal/cmd/secretsmanager/**"
+    - "internal/cmd/dremio/**"
+    - "internal/cmd/modelexperiments/**"
+    - "internal/cmd/ufw/**"
+    - "internal/cmd/workflows/**"
+    - "internal/cmd/valkey/**"
 # databases
 "domain:Databases":
 - changed-files:
   - any-glob-to-any-file:
-    - "internal/cmd/mongodbflex/*"
-    - "internal/cmd/mariadb/*"
-    - "internal/cmd/sqlserverflex/*"
-    - "internal/cmd/postgresflex/*"
+    - "internal/cmd/mongodbflex/**"
+    - "internal/cmd/mariadb/**"
+    - "internal/cmd/sqlserverflex/**"
+    - "internal/cmd/postgresflex/**"
 # IaaS
 "domain:IaaS":
 - changed-files:
   - any-glob-to-any-file:
-    - "internal/cmd/network-area/*"
-    - "internal/cmd/network/*"
-    - "internal/cmd/network-interface/*"
-    - "internal/cmd/public-ip/*"
-    - "internal/cmd/server/*"
-    - "internal/cmd/volume/*"
-    - "internal/cmd/security-group/*"
-    - "internal/cmd/image/*"
-    - "internal/cmd/objectstorage/*"
-    - "internal/cmd/runcommand/*"
-    - "internal/cmd/serverbackup/*"
-    - "internal/cmd/serverupdate/*"
-    - "internal/cmd/sfs/*"
-    - "internal/cmd/automation/*"
+    - "internal/cmd/network-area/**"
+    - "internal/cmd/network/**"
+    - "internal/cmd/network-interface/**"
+    - "internal/cmd/public-ip/**"
+    - "internal/cmd/server/**"
+    - "internal/cmd/volume/**"
+    - "internal/cmd/security-group/**"
+    - "internal/cmd/image/**"
+    - "internal/cmd/objectstorage/**"
+    - "internal/cmd/runcommand/**"
+    - "internal/cmd/serverbackup/**"
+    - "internal/cmd/serverupdate/**"
+    - "internal/cmd/sfs/**"
+    - "internal/cmd/automation/**"
 # core platform
 "domain:CorePlatform":
 - changed-files:
   - any-glob-to-any-file:
-    - "internal/cmd/auditlog/*"
-    - "internal/cmd/authorization/*"
-    - "internal/cmd/organization/*"
-    - "internal/cmd/project/*"
-    - "internal/cmd/serviceaccount/*"
-    - "internal/cmd/serviceenablement/*"
-    - "internal/cmd/cost/*"
+    - "internal/cmd/auditlog/**"
+    - "internal/cmd/authorization/**"
+    - "internal/cmd/organization/**"
+    - "internal/cmd/project/**"
+    - "internal/cmd/serviceaccount/**"
+    - "internal/cmd/serviceenablement/**"
+    - "internal/cmd/cost/**"

.github/workflows/ci.yaml

@@ -65,7 +65,7 @@ jobs:
       pull-requests: write # write permission needed to comment on PR
     steps:
       - name: Check new code coverage
-        uses: fgrosse/go-coverage-report@v1.4.0
+        uses: fgrosse/go-coverage-report@v1.5.0
         continue-on-error: true  # Add this line to prevent pipeline failures in forks
         with:
           coverage-artifact-name: ${{ env.CODE_COVERAGE_ARTIFACT_NAME }}

.github/workflows/labeler.yaml

@@ -8,17 +8,49 @@ on:
     - cron: '0 * * * *'
 
 jobs:
-  labeler:
+  # this job runs when the workflow was triggered by the 'pull_request' event
+  pr-labeler:
     permissions:
       contents: read
       pull-requests: write
       issues: write
     # don't run on PRs from forks (token has no write permissions)
-    if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
+    if: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository }}
     name: "Labeler"
     runs-on: ubuntu-latest
     steps:
       - name: Labeler action
         uses: actions/labeler@v7
         with:
           sync-labels: false
+  
+  # This job runs when the workflow was triggered by the 'workflow_dispatch' or the 'schedule' event.
+  # This is neccessary because for PRs from forks the default short-lived GitHub token has no write permissions
+  # and can not add labels to the PR therefore. This means we have to label all PRs from forks using the 'schedule' event.
+  scheduled-labeler:
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+    # don't run on PRs from forks (token has no write permissions)
+    if: ${{ github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' }}
+    name: "Label all open PRs"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Fetch open PR numbers
+        id: fetch-prs
+        run: |
+          {
+            echo 'numbers<<EOF'
+            gh pr list --repo ${{ github.repository }} --state open --limit 500 --json number --jq '.[].number'
+            echo EOF
+          } >> "$GITHUB_OUTPUT"
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Labeler action
+        if: ${{ steps.fetch-prs.outputs.numbers != '' }}
+        uses: actions/labeler@v7
+        with:
+          sync-labels: false
+          pr-number: ${{ steps.fetch-prs.outputs.numbers }}

.github/workflows/stale.yaml

@@ -9,8 +9,8 @@ on:
     paths: [".github/workflows/stale.yaml"]
 
 env:
-  DAYS_BEFORE_PR_STALE: 7
-  DAYS_BEFORE_PR_CLOSE: 7
+  DAYS_BEFORE_PR_STALE: 14
+  DAYS_BEFORE_PR_CLOSE: 14
   EXEMPT_PR_LABELS: "ignore-stale"
 
 permissions:

README.md

@@ -74,6 +74,7 @@ Below you can find a list of the STACKIT services already available in the CLI (
 | Authorization                      | `project`, `organization`                                                                                                                                                                           | :white_check_mark:        |
 | DNS                                | `dns`                                                                                                                                                                                               | :white_check_mark:        |
 | Edge Cloud                         | `beta edge-cloud`                                                                                                                                                                                   | :white_check_mark: (beta) |
+| File Storage (SFS)                 | `sfs`                                                                                                                                                                                               | :white_check_mark:        |
 | Git                                | `git`                                                                                                                                                                                               | :white_check_mark:        |
 | Infrastructure as a Service (IaaS) | `affinity-group` <br/> `image` <br/> `key-pair` <br/> `network` <br/> `network-area` <br/> `network-interface` <br/> `public-ip` <br/> `quota` <br/> `security-group` <br/> `server` <br/> `volume` | :white_check_mark:        |
 | Intake                             | `beta intake`                                                                                                                                                                                       | :white_check_mark: (beta) |
@@ -95,7 +96,6 @@ Below you can find a list of the STACKIT services already available in the CLI (
 | Server Command (Run Command)       | `server command`                                                                                                                                                                                    | :white_check_mark:        |
 | Service Account                    | `service-account`                                                                                                                                                                                   | :white_check_mark:        |
 | SQLServer Flex                     | `sqlserverflex`                                                                                                                                                                                     | :white_check_mark:        |
-| File Storage (SFS)                 | `beta sfs`                                                                                                                                                                                          | :white_check_mark: (beta) |
 
 ## Authentication
 

docs/stackit.md

@@ -27,6 +27,7 @@ stackit [flags]
 ### SEE ALSO
 
 * [stackit affinity-group](./stackit_affinity-group.md)	 - Manage server affinity groups
+* [stackit alpha](./stackit_alpha.md)	 - Contains alpha STACKIT CLI commands
 * [stackit auth](./stackit_auth.md)	 - Authenticates the STACKIT CLI
 * [stackit beta](./stackit_beta.md)	 - Contains beta STACKIT CLI commands
 * [stackit config](./stackit_config.md)	 - Provides functionality for CLI configuration options
@@ -57,6 +58,7 @@ stackit [flags]
 * [stackit security-group](./stackit_security-group.md)	 - Manage security groups
 * [stackit server](./stackit_server.md)	 - Provides functionality for servers
 * [stackit service-account](./stackit_service-account.md)	 - Provides functionality for service accounts
+* [stackit sfs](./stackit_sfs.md)	 - Provides functionality for SFS (STACKIT File Storage)
 * [stackit ske](./stackit_ske.md)	 - Provides functionality for SKE
 * [stackit sqlserverflex](./stackit_sqlserverflex.md)	 - Provides functionality for SQLServer Flex
 * [stackit ufw](./stackit_ufw.md)	 - Provides functionality for UFW

docs/stackit_alpha.md

@@ -0,0 +1,45 @@
+## stackit alpha
+
+Contains alpha STACKIT CLI commands
+
+### Synopsis
+
+Contains alpha STACKIT CLI commands.
+The commands under this group are still in an alpha state, and functionality may be incomplete or have breaking changes.
+
+```
+stackit alpha [flags]
+```
+
+### Examples
+
+```
+  See the currently available alpha commands
+  $ stackit alpha --help
+
+  Execute an alpha command
+  $ stackit alpha MY_COMMAND
+```
+
+### Options
+
+```
+  -h, --help   Help for "stackit alpha"
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, (one of: [json, pretty, none, yaml])
+  -p, --project-id string      Project ID
+      --region string          Target region for region-specific requests
+      --verbosity string       Verbosity of the CLI, (one of: [debug, info, warning, error]) (default "info")
+```
+
+### SEE ALSO
+
+* [stackit](./stackit.md)	 - Manage STACKIT resources using the command line
+* [stackit alpha vpc](./stackit_alpha_vpc.md)	 - Manages vpcs
+

docs/stackit_alpha_vpc.md

@@ -0,0 +1,39 @@
+## stackit alpha vpc
+
+Manages vpcs
+
+### Synopsis
+
+Manages the lifecycle of vpcs.
+
+```
+stackit alpha vpc [flags]
+```
+
+### Options
+
+```
+  -h, --help   Help for "stackit alpha vpc"
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, (one of: [json, pretty, none, yaml])
+  -p, --project-id string      Project ID
+      --region string          Target region for region-specific requests
+      --verbosity string       Verbosity of the CLI, (one of: [debug, info, warning, error]) (default "info")
+```
+
+### SEE ALSO
+
+* [stackit alpha](./stackit_alpha.md)	 - Contains alpha STACKIT CLI commands
+* [stackit alpha vpc create](./stackit_alpha_vpc_create.md)	 - Creates a VPC
+* [stackit alpha vpc delete](./stackit_alpha_vpc_delete.md)	 - Deletes a VPC
+* [stackit alpha vpc describe](./stackit_alpha_vpc_describe.md)	 - Shows details of a VPC
+* [stackit alpha vpc list](./stackit_alpha_vpc_list.md)	 - Lists all VPC of a project
+* [stackit alpha vpc region](./stackit_alpha_vpc_region.md)	 - Manages regional configurations of a VPC
+* [stackit alpha vpc update](./stackit_alpha_vpc_update.md)	 - Updates a VPC
+

docs/stackit_alpha_vpc_create.md

@@ -0,0 +1,44 @@
+## stackit alpha vpc create
+
+Creates a VPC
+
+### Synopsis
+
+Creates a VPC.
+VPC can only be used in projects with enabled VPC.
+
+```
+stackit alpha vpc create [flags]
+```
+
+### Examples
+
+```
+  Create a vpc with name "my-vpc"
+  $ stackit alpha vpc create --name my-vpc
+```
+
+### Options
+
+```
+      --description string      Description of the VPC
+  -h, --help                    Help for "stackit alpha vpc create"
+      --labels stringToString   Comma separated list of labels of the VPC (default [])
+      --name string             Name of the VPC
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, (one of: [json, pretty, none, yaml])
+  -p, --project-id string      Project ID
+      --region string          Target region for region-specific requests
+      --verbosity string       Verbosity of the CLI, (one of: [debug, info, warning, error]) (default "info")
+```
+
+### SEE ALSO
+
+* [stackit alpha vpc](./stackit_alpha_vpc.md)	 - Manages vpcs
+