Skip to content

Repository navigation

ntk v1.2.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Oct 14:33
v1.2.0
ca3eb4e
This commit was signed with the committer’s verified signature.
NSjogren Nils Sjögren
SSH Key Fingerprint: zK/9KwsCUg47816GccaV0E7YhXFLmuUF8r/NeR+3CIM
Verified
Learn about vigilant mode.

Log in to more managed Kafka services, with OAUTHBEARER and AWS MSK IAM, and decide per profile what happens with destructive commands.

Breaking changes

  • --confirm and typed confirmation are gone. Destructive commands no longer ask you to type a name. Each profile's new deletion_prevention setting decides instead (see below), and the default asks y/N. Remove --confirm from scripts; -y is all they need.
  • Profile labels are gone, and prod is no longer special. The labels field and --labels flag were removed, so a prod label no longer changes how ntk confirms anything. To protect a production profile, set ntk profile edit prod --set deletion_prevention=always, or --set read_only=true.
  • Tombstones on compacted topics and unclean leader elections now count as destructive. With the default setting they ask first, so a script that sends tombstones without -y will stop and ask. Add -y, or set deletion_prevention to never on that profile.

Highlights

  • OAUTHBEARER authentication, for Confluent Cloud, Strimzi with Keycloak, Azure Event Hubs and other OAuth setups. The token comes from client credentials (ntk fetches it from your identity provider), a file another tool keeps up to date, or a command that prints it. Tokens from an identity provider are cached between runs until shortly before they expire. SASL extensions are supported for services that need them, such as Confluent Cloud's logicalCluster.
  • AWS MSK IAM authentication. ntk finds AWS credentials the way the AWS CLI does (environment, ~/.aws profiles including SSO, EC2, ECS and EKS roles), and you can name an AWS profile or a role to assume.
  • deletion_prevention on every profile. always refuses destructive commands, even with -y; prompt, the default, shows the plan and asks; never just runs them. --dry-run always works.
  • Every profile gets its own colour. New profiles get a colour no other profile uses, shown in prompts and the TUI header. You can still set one yourself, as a hex value like #ff00ee or a name like red.

Install

  • Binaries for Linux (amd64, arm64, armv7), macOS (Intel and Apple silicon), Windows (amd64, arm64) and FreeBSD (amd64) are attached below, each with a .sha256 file.
  • Docker: ghcr.io/ntailio/ntk:v1.2.0, also tagged latest
  • Go: go install github.com/ntailio/ntk/cmd/ntk@v1.2.0
Assets 18
Loading