Skip to content

CLI 1.13.0

Choose a tag to compare

View all tags
@mabadir mabadir released this 06 Oct 22:22
v1.13.0
0c7dd55
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

1.13.0 (2026-10-02)

Breaking Changes

  • API key permission groups expose resourceTypes entries with a type field, matching the authorization catalog. Permission strings such as project:read are unchanged.

Features

  • API keys can be limited to a set of permissions, type:action pairs such as project:read or pipelineRun:create. A key may do something only when its owner may too, so it narrows its owner's permissions but never widens them. ravion api-key update --permissions sets them, as a comma-separated or repeated list; --clear-permissions removes the limit and restores the owner's permissions. Omitting both flags keeps the current limit. Changing them needs you signed in, not an API key. Limits apply only where authorization enforcement is enabled; limited keys cannot access the Terraform Cloud API, personal-account operations, or another organization.
  • API key output adds permissions.
  • Added ravion api-key permissions --owner-type --owner-id, which prints each resource type's available actions and the owner's Allow grants, grouped by high-level entity. Denies still apply to requests. The command warns when permission limits are not enforced in the organization.
Assets 9
Loading