Merge branch 'main' into support-azdo

Author: cgoetz-inovex

CHANGELOG.md

@@ -1,9 +1,17 @@
-## Release (2026-mm-dd)
-- `core`: 
-  - [v0.22.0](core/CHANGELOG.md#v0220) 
-    - **Feature:** Support Azure DevOps OIDC adapter
-  - [v0.21.1](core/CHANGELOG.md#v0211) 
-    - **Dependencies**: Bump `github.com/golang-jwt/jwt/v5` from `v5.3.0` to `v5.3.1`
+## Release (2026-DD-MM)
+
+- `core`: [v0.22.0](core/CHANGELOG.md#v0220) 
+  - **Feature:** Support Azure DevOps OIDC adapter
+- `alb`: [v0.10.0](services/alb/CHANGELOG.md#v0100)
+  - **Feature:** Add new field `AltPort` to `ActiveHealthCheck`
+  - **Feature:** Add new field `Tls` to `HttpHealthCheck`
+  - **Breaking change:** Renamed `TargetPoolTlsConfig` to `TlsConfig`
+- `loadbalancer`: [v1.8.0](services/loadbalancer/CHANGELOG.md#v180)
+  - **Feature:** Add new fields `AltPort` and `HttpHealthCheck` to `ActiveHealthCheck`
+
+## Release (2026-02-20)
+- `core`: [v0.21.1](core/CHANGELOG.md#v0211) 
+  - **Dependencies**: Bump `github.com/golang-jwt/jwt/v5` from `v5.3.0` to `v5.3.1`
 - `alb`: 
   - [v0.9.3](services/alb/CHANGELOG.md#v093)
     - Bump STACKIT SDK core module from `v0.21.0` to `v0.21.1`
@@ -20,11 +28,16 @@
   - [v0.1.4](services/auditlog/CHANGELOG.md#v014) 
     - **Dependencies**: Bump `github.com/golang-jwt/jwt/v5` from `v5.3.0` to `v5.3.1`
 - `authorization`: 
+  - [v0.12.0](services/authorization/CHANGELOG.md#v0120)
+    - **Breaking change:** removed operation `GetAssignableSubjects` and related models `AssignableSubject`, `ListAssignableSubjectsResponse`
   - [v0.11.3](services/authorization/CHANGELOG.md#v0113)
     - Bump STACKIT SDK core module from `v0.21.0` to `v0.21.1`
   - [v0.11.2](services/authorization/CHANGELOG.md#v0112) 
     - **Dependencies**: Bump `github.com/golang-jwt/jwt/v5` from `v5.3.0` to `v5.3.1`
 - `cdn`: 
+  - [v1.10.0](services/cdn/CHANGELOG.md#v1100)
+    - **Feature:** Add support for `RedirectConfig` in `Config`, `ConfigPatch` and `CreateDistributionPayload` models
+      - new related models `RedirectConfig`, `RedirectRule`, `Matcher` and `MatchCondition`
   - [v1.9.4](services/cdn/CHANGELOG.md#v194)
     - Bump STACKIT SDK core module from `v0.21.0` to `v0.21.1`
   - [v1.9.3](services/cdn/CHANGELOG.md#v193) 
@@ -107,6 +120,52 @@
   - [v1.4.4](services/objectstorage/CHANGELOG.md#v144) 
     - **Dependencies**: Bump `github.com/golang-jwt/jwt/v5` from `v5.3.0` to `v5.3.1`
 - `observability`: 
+  - [v0.17.0](services/observability/CHANGELOG.md#v0170)
+    - **Feature:** add AlertRecord
+      - new related operations: `CreateAlertRecord`, `DeleteAlertRecord`, `DeleteAlertRecords`, `GetAlertRecord`, `ListAlertRecords`, `PartialUpdateAlertRecords`, `UpdateAlertRecord`
+      - new related models: `UpdateAlertRecordPayload`, `PartialUpdateAlertRecordsRequestInner`, `CreateAlertRecordPayload`, `AlertRecord`, `AlertRecordResponse`, `AlertRecordsResponse`
+    - **Feature:** add Backups
+      - new related operations: `CreateBackup`, `CreateBackupSchedule`, `ListBackupRetentions`, `ListBackupSchedules`, `ListBackups`, `RestoreBackup`
+      - new related models: `BackupResponse`, `BackupRetentionResponse`, `BackupSchedule`, `BackupSchedulePostResponse`, `BackupScheduleResponse`, `CreateBackupSchedulePayload`
+    - **Feature:** add Elasticsearch checks
+      - new related operations `CreateElasticsearchCheck`, `DeleteElasticsearchCheck`, `ListElasticsearchChecks`
+      - new related models `ElasticsearchCheckChildResponse`, `ElasticsearchCheckResponse` `CreateElasticsearchCheckPayload`
+    - **Feature:** add Mongodb checks
+      - new related operations `CreateMongodbCheck`, `ListMongodbChecks`, `DeleteMongodbCheck`
+      - new related models `MongodbCheckChildResponse`, `MongodbCheckResponse`, `CreateMongodbCheckPayload`
+    - **Feature:** add Mysql checks
+      - new related operations `CreateMysqlCheck`, `DeleteMysqlCheck`, `ListMysqlChecks`
+      - new related models `MysqlCheckChildResponse`, `MysqlCheckResponse`, `CreateMysqlCheckPayload`
+    - **Feature:** add Network checks
+      - new related operations `CreateNetworkCheck`, `DeleteNetworkCheck`, `ListNetworkChecks`
+      - new related models `NetworkCheckChildResponse`, `NetworkCheckResponse`, `CreateNetworkCheckPayload`
+    - **Feature:** add Ping checks
+      - new related operations `CreatePingCheck`, `DeletePingCheck`, `ListPingChecks`
+      - new related models `PingCheckChildResponse`, `PingCheckResponse`, `CreatePingCheckPayload`
+    - **Feature:** add Postgresql checks
+      - new related operations `CreatePostgresqlCheck`, `DeletePostgresqlCheck`, `ListPostgresqlChecks`
+      - new related models `PostgresqlCheckChildResponse`, `PostgresqlCheckResponse`, `CreatePostgresqlCheckPayload`
+    - **Feature:** add Rabbitmq checks
+      - new related operations `CreateRabbitmqCheck`, `DeleteRabbitmqCheck`, `ListRabbitmqChecks`
+      - new related models `RabbitmqCheckChildResponse`, `RabbitmqCheckResponse`, `CreateRabbitmqCheckPayload`
+    - **Feature:** add Redis checks
+      - new related operations `CreateRedisCheck`, `ListRedisChecks`, `DeleteRedisCheck`
+      - new related models `RedisCheckChildResponse`, `RedisCheckResponse`, `CreateRedisCheckPayload`
+    - **Feature:** extended AlertRules
+      - new related operations `DeleteAlertRule`, `GetAlertRule`, `UpdateAlertRule`
+      - new related models `AlertRuleResponse`, `UpdateAlertRulePayload`
+    - **Feature:** add Offerings
+      - new related operation `ListOfferings`
+      - new related model `Offerings`
+    -  **Feature:** extended Scrape
+      - new related operations `DeleteScrapeConfigs`, `PartialUpdateScrapeConfigs`
+    - ️**Breaking change:** renamed AlertRule to AlertruleResponse
+    - ️**Breaking change:** renamed CreateScrapeConfigPayloadHttpSdConfigsInner to PartialUpdateScrapeConfigsRequestInnerHttpSdConfigsInner
+    - ️**Breaking change:** renamed CreateScrapeConfigPayloadHttpSdConfigsInnerOauth2 to PartialUpdateScrapeConfigsRequestInnerHttpSdConfigsInner
+    - ️**Breaking change:** renamed CreateScrapeConfigPayloadHttpSdConfigsInnerOauth2TlsConfig to PartialUpdateScrapeConfigsRequestInnerHttpSdConfigsInnerTlsConfig
+    - ️**Breaking change:** renamed CreateScrapeConfigPayloadMetricsRelabelConfigsInner to PartialUpdateScrapeConfigsRequestInnerMetricsRelabelConfigsInner
+    - ️**Breaking change:** renamed CreateScrapeConfigPayloadStaticConfigsInner to PartialUpdateScrapeConfigsRequestInnerStaticConfigsInner
+    - ️**Breaking change:** renamed CreateScrapeConfigPayloadBasicAuth to PartialUpdateScrapeConfigsRequestInnerBasicAuth
   - [v0.16.3](services/observability/CHANGELOG.md#v0163)
     - Bump STACKIT SDK core module from `v0.21.0` to `v0.21.1`
   - [v0.16.2](services/observability/CHANGELOG.md#v0162) 
@@ -122,6 +181,8 @@
   - [v1.3.4](services/postgresflex/CHANGELOG.md#v134) 
     - **Dependencies**: Bump `github.com/golang-jwt/jwt/v5` from `v5.3.0` to `v5.3.1`
 - `rabbitmq`: 
+  - [v0.26.0](services/rabbitmq/CHANGELOG.md#v0260)
+    - **Breaking change:** `SetTLSProtocols` now accepts a slice of strings instead of a single string
   - [v0.25.6](services/rabbitmq/CHANGELOG.md#v0256)
     - Bump STACKIT SDK core module from `v0.21.0` to `v0.21.1`
   - [v0.25.5](services/rabbitmq/CHANGELOG.md#v0255) 
@@ -162,6 +223,10 @@
   - [v1.2.5](services/serverupdate/CHANGELOG.md#v125) 
     - **Dependencies**: Bump `github.com/golang-jwt/jwt/v5` from `v5.3.0` to `v5.3.1`
 - `serviceaccount`: 
+  - [v0.12.0](services/serviceaccount/CHANGELOG.md#v0120)
+    - **Feature:** add support for Federated Identity Providers
+      - new operations: `CreateFederatedIdentityProvider`, `DeleteServiceFederatedIdentityProvider`, `ListFederatedIdentityProviders`, `PartialUpdateServiceAccountFederatedIdentityProvider`
+      - new models: `CreateFederatedIdentityProviderPayload`, `CreateFederatedIdentityProviderPayloadAssertionsInner`, `CreateFederatedIdentityProviderResponse`, `CreateFederatedIdentityProviderResponseAssertionsInner`, `FederatedListFederatedIdentityProvidersResponse`, `PartialUpdateServiceAccountFederatedIdentityProviderPayload`
   - [v0.11.6](services/serviceaccount/CHANGELOG.md#v0116)
     - Bump STACKIT SDK core module from `v0.21.0` to `v0.21.1`
   - [v0.11.5](services/serviceaccount/CHANGELOG.md#v0115) 
@@ -171,7 +236,9 @@
     - Bump STACKIT SDK core module from `v0.21.0` to `v0.21.1`
   - [v1.2.6](services/serviceenablement/CHANGELOG.md#v126) 
     - **Dependencies**: Bump `github.com/golang-jwt/jwt/v5` from `v5.3.0` to `v5.3.1`
-- `sfs`: 
+- `sfs`:
+  - [v0.4.0](services/sfs/CHANGELOG.md#v040)
+    - **Breaking change:** The `name` and `spaceHardLimitGigabytes` fields are now marked as required for `ShareExportPayload`, `SharePayload`.
   - [v0.3.0](services/sfs/CHANGELOG.md#v030)
     - **Feature:** Switch from `v1beta` API version to `v1` version.
     - **Breaking change:** Remove `ListSnapshotSchedules` method
@@ -182,6 +249,10 @@
   - [v0.2.2](services/sfs/CHANGELOG.md#v022) 
     - **Dependencies**: Bump `github.com/golang-jwt/jwt/v5` from `v5.3.0` to `v5.3.1`
 - `ske`: 
+  - [v1.7.0](services/ske/CHANGELOG.md#v170)
+    - **Feature:** new model `AccessScope`
+    - **Feature:** new model `V2ControlPlaneNetwork`
+    - **Feature:** added field `ControlPlane` of type `V2ControlPlaneNetwork` to model `Network`
   - [v1.6.3](services/ske/CHANGELOG.md#v163)
     - Bump STACKIT SDK core module from `v0.21.0` to `v0.21.1`
   - [v1.6.2](services/ske/CHANGELOG.md#v162) 

README.md

@@ -103,15 +103,20 @@ To authenticate with the SDK, you need a [service account](https://docs.stackit.
 
 ### Authentication Methods
 
-The SDK supports two authentication methods:
+The SDK supports three authentication methods:
 
-1. **Key Flow** (Recommended)
+1. **Workload Identity Federation Flow**
+
+   - Uses OIDC trusted tokens
+   - Provides best security through short-lived tokens without secrets
+
+2. **Key Flow**
 
    - Uses RSA key-pair based authentication
    - Provides better security through short-lived tokens
    - Supports both STACKIT-generated and custom key pairs
 
-2. **Token Flow**
+3. **Token Flow** (Deprecated)
    - Uses long-lived service account tokens
    - Simpler but less secure
 
@@ -120,10 +125,40 @@ The SDK supports two authentication methods:
 The SDK searches for credentials in the following order:
 
 1. Explicit configuration in code
-2. Environment variables (KEY_PATH for KEY)
+2. Environment variables
 3. Credentials file (`$HOME/.stackit/credentials.json`)
 
-For each authentication method, the key flow is attempted first, followed by the token flow.
+For each authentication method, the try order is:
+1. Workload Identity Federation Flow
+2. Key Flow
+3. Token Flow
+
+### Using the Workload Identity Fedearion Flow
+
+1. Create a service account trusted relation in the STACKIT Portal:
+
+   - Navigate to `Service Accounts` → Select account → `Federated Identity Providers`
+   - [Configure a Federated Identity Provider](https://docs.stackit.cloud/platform/access-and-identity/service-accounts/how-tos/manage-service-account-federations/#create-a-federated-identity-provider) and the required assertions to trust in.
+
+2. Configure authentication using any of these methods:
+
+   **A. Code Configuration**
+
+```go
+// Using wokload identity federation flow
+config.WithWorkloadIdentityFederationAuth()
+// With the custom path for the external OIDC token
+config.WithWorkloadIdentityFederationPath("/path/to/your/federated/token")
+// For the service account
+config.WithServiceAccountEmail("my-sa@sa-stackit.cloud")
+```
+**B. Environment Variables**
+```bash
+# With the custom path for the external OIDC token
+STACKIT_FEDERATED_TOKEN_FILE=/path/to/your/federated/token
+# For the service account
+STACKIT_SERVICE_ACCOUNT_EMAIL=my-sa@sa-stackit.cloud
+```
 
 ### Using the Key Flow
 

examples/authorization/go.mod

@@ -4,7 +4,7 @@ go 1.21
 
 require (
 	github.com/stackitcloud/stackit-sdk-go/core v0.21.1
-	github.com/stackitcloud/stackit-sdk-go/services/authorization v0.11.3
+	github.com/stackitcloud/stackit-sdk-go/services/authorization v0.12.0
 )
 
 require (

examples/authorization/go.sum

@@ -6,5 +6,5 @@ github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/stackitcloud/stackit-sdk-go/core v0.21.1 h1:Y/PcAgM7DPYMNqum0MLv4n1mF9ieuevzcCIZYQfm3Ts=
 github.com/stackitcloud/stackit-sdk-go/core v0.21.1/go.mod h1:osMglDby4csGZ5sIfhNyYq1bS1TxIdPY88+skE/kkmI=
-github.com/stackitcloud/stackit-sdk-go/services/authorization v0.11.3 h1:JMKEeNQpA+Mb1DRpY3MRQL3pko5JjUWGrevN0xOrx+4=
-github.com/stackitcloud/stackit-sdk-go/services/authorization v0.11.3/go.mod h1:uYI9pHAA2g84jJN25ejFUxa0/JtfpPZqMDkctQ1BzJk=
+github.com/stackitcloud/stackit-sdk-go/services/authorization v0.12.0 h1:HxPgBu04j5tj6nfZ2r0l6v4VXC0/tYOGe4sA5Addra8=
+github.com/stackitcloud/stackit-sdk-go/services/authorization v0.12.0/go.mod h1:uYI9pHAA2g84jJN25ejFUxa0/JtfpPZqMDkctQ1BzJk=

examples/observability/go.mod

@@ -4,7 +4,7 @@ go 1.21
 
 require (
 	github.com/stackitcloud/stackit-sdk-go/core v0.21.1
-	github.com/stackitcloud/stackit-sdk-go/services/observability v0.16.3
+	github.com/stackitcloud/stackit-sdk-go/services/observability v0.17.0
 )
 
 require (

examples/observability/go.sum

@@ -6,5 +6,5 @@ github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/stackitcloud/stackit-sdk-go/core v0.21.1 h1:Y/PcAgM7DPYMNqum0MLv4n1mF9ieuevzcCIZYQfm3Ts=
 github.com/stackitcloud/stackit-sdk-go/core v0.21.1/go.mod h1:osMglDby4csGZ5sIfhNyYq1bS1TxIdPY88+skE/kkmI=
-github.com/stackitcloud/stackit-sdk-go/services/observability v0.16.3 h1:J/R6iBALMiNpg+JDEx1adH50TM4UTF/KBYFuHENMKIs=
-github.com/stackitcloud/stackit-sdk-go/services/observability v0.16.3/go.mod h1:9KdrXC5JS30Ay3mR0adb3vNdhca+qxiy/cPF5P4wehQ=
+github.com/stackitcloud/stackit-sdk-go/services/observability v0.17.0 h1:LGwCvvST0fwUgZ6bOxYIfu45qqTgv421ZS07UhKjZL8=
+github.com/stackitcloud/stackit-sdk-go/services/observability v0.17.0/go.mod h1:9KdrXC5JS30Ay3mR0adb3vNdhca+qxiy/cPF5P4wehQ=

examples/rabbitmq/go.mod

@@ -4,7 +4,7 @@ go 1.21
 
 require (
 	github.com/stackitcloud/stackit-sdk-go/core v0.21.1
-	github.com/stackitcloud/stackit-sdk-go/services/rabbitmq v0.25.6
+	github.com/stackitcloud/stackit-sdk-go/services/rabbitmq v0.26.0
 )
 
 require (

examples/rabbitmq/go.sum

@@ -6,5 +6,5 @@ github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/stackitcloud/stackit-sdk-go/core v0.21.1 h1:Y/PcAgM7DPYMNqum0MLv4n1mF9ieuevzcCIZYQfm3Ts=
 github.com/stackitcloud/stackit-sdk-go/core v0.21.1/go.mod h1:osMglDby4csGZ5sIfhNyYq1bS1TxIdPY88+skE/kkmI=
-github.com/stackitcloud/stackit-sdk-go/services/rabbitmq v0.25.6 h1:+TFfl1ON/uM5aO0FdkBNYKBa7vx0zrCYVtX6zvqQYBA=
-github.com/stackitcloud/stackit-sdk-go/services/rabbitmq v0.25.6/go.mod h1:hnhvlLX1Y71R8KIQqLBeoSZqkU5ZJOG0J4wz0LeUdaw=
+github.com/stackitcloud/stackit-sdk-go/services/rabbitmq v0.26.0 h1:/8lmviszgrB+0Cz7HdhFELyTiTeqIs7LfnI6sNX4rW8=
+github.com/stackitcloud/stackit-sdk-go/services/rabbitmq v0.26.0/go.mod h1:hnhvlLX1Y71R8KIQqLBeoSZqkU5ZJOG0J4wz0LeUdaw=

examples/serviceaccount/go.mod

@@ -4,7 +4,7 @@ go 1.21
 
 require (
 	github.com/stackitcloud/stackit-sdk-go/core v0.21.1
-	github.com/stackitcloud/stackit-sdk-go/services/serviceaccount v0.11.6
+	github.com/stackitcloud/stackit-sdk-go/services/serviceaccount v0.12.0
 )
 
 require (

examples/serviceaccount/go.sum

@@ -6,5 +6,5 @@ github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/stackitcloud/stackit-sdk-go/core v0.21.1 h1:Y/PcAgM7DPYMNqum0MLv4n1mF9ieuevzcCIZYQfm3Ts=
 github.com/stackitcloud/stackit-sdk-go/core v0.21.1/go.mod h1:osMglDby4csGZ5sIfhNyYq1bS1TxIdPY88+skE/kkmI=
-github.com/stackitcloud/stackit-sdk-go/services/serviceaccount v0.11.6 h1:WU76mZkJP6diMDjGFqM8On6fZhUDmGcy6ppX0+kWx9Y=
-github.com/stackitcloud/stackit-sdk-go/services/serviceaccount v0.11.6/go.mod h1:hRllU+yEJM6ovrLeXwVeT5hI70ftPKjX4z/Nj8TZqJw=
+github.com/stackitcloud/stackit-sdk-go/services/serviceaccount v0.12.0 h1:l1EDIlXce2C8JcbBDHVa6nZ4SjPTqmnALTgrhms+NKI=
+github.com/stackitcloud/stackit-sdk-go/services/serviceaccount v0.12.0/go.mod h1:EXq8/J7t9p8zPmdIq+atuxyAbnQwxrQT18fI+Qpv98k=