Add IP allowlist, release v0.3.2

* feat: add ip config * feat: add LastResetAt * fix: fix URL to fetch API spec for automated drift detection --------- Signed-off-by: Dmitry Kisler <admin@dkisler.com>
kislerdm · Dec 20, 2023 · d8f8812 · d8f8812
1 parent 7229155
commit d8f8812
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 6 deletions.
diff --git a/.github/workflows/check-api-spec-updates.yaml b/.github/workflows/check-api-spec-updates.yaml
@@ -22,7 +22,7 @@ jobs:
         run: |
           curl -SLo openAPIDefinition_new.json "$SPEC_URL"
         env:
-          SPEC_URL: https://dfv3qgd2ykmrx.cloudfront.net/api_spec/release/v2.json
+          SPEC_URL: https://neon.tech/api_spec/release/v2.json
       - name: Diff spec files
         id: diff
         run: |

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [v0.3.2] - 2023-12-20
+
+The release incorporates the up-to-date [API contract](openAPIDefinition.json) as of 2023-12-20 10:37:20 GMT.
+
+### Added
+
+- Project level configuration of IP addresses allowed to connect to the endpoints.
+- `LastResetAt` attribute indicating the last time when a branch was reset. 
+
 ## [v0.3.1] - 2023-11-02
 
 The release incorporates the up-to-date [API contract](openAPIDefinition.json) as of 2023-11-02 13:54:20 GMT.

diff --git a/openAPIDefinition.json b/openAPIDefinition.json
@@ -4189,7 +4189,7 @@
                         "$ref": "#/components/schemas/EndpointPoolerMode"
                     },
                     "disabled": {
-                        "description": "Whether to restrict connections to the compute endpoint.\nEnabling this option schedules a suspend compute operation.\nA disabled compute endpoint cannot be enabled by a connection or\nconsole action. However, the compute endpoint is periodically \nenabled by check_availability operations.\n",
+                        "description": "Whether to restrict connections to the compute endpoint.\nEnabling this option schedules a suspend compute operation.\nA disabled compute endpoint cannot be enabled by a connection or\nconsole action. However, the compute endpoint is periodically\nenabled by check_availability operations.\n",
                         "type": "boolean"
                     },
                     "passwordless_access": {
@@ -4291,12 +4291,14 @@
                 ],
                 "properties": {
                     "ips": {
+                        "description": "A list of IP addresses that are allowed to connect to the endpoint.",
                         "type": "array",
                         "items": {
                             "type": "string"
                         }
                     },
                     "primary_branch_only": {
+                        "description": "If true, the list will be applied only to the primary branch.",
                         "type": "boolean"
                     }
                 }
@@ -4349,7 +4351,7 @@
                             },
                             "disabled": {
                                 "type": "boolean",
-                                "description": "Whether to restrict connections to the compute endpoint.\nEnabling this option schedules a suspend compute operation.\nA disabled compute endpoint cannot be enabled by a connection or\nconsole action. However, the compute endpoint is periodically \nenabled by check_availability operations.\n"
+                                "description": "Whether to restrict connections to the compute endpoint.\nEnabling this option schedules a suspend compute operation.\nA disabled compute endpoint cannot be enabled by a connection or\nconsole action. However, the compute endpoint is periodically\nenabled by check_availability operations.\n"
                             },
                             "passwordless_access": {
                                 "type": "boolean",
@@ -4398,7 +4400,7 @@
                                 "$ref": "#/components/schemas/EndpointPoolerMode"
                             },
                             "disabled": {
-                                "description": "Whether to restrict connections to the compute endpoint.\nEnabling this option schedules a suspend compute operation.\nA disabled compute endpoint cannot be enabled by a connection or\nconsole action. However, the compute endpoint is periodically \nenabled by check_availability operations.\n",
+                                "description": "Whether to restrict connections to the compute endpoint.\nEnabling this option schedules a suspend compute operation.\nA disabled compute endpoint cannot be enabled by a connection or\nconsole action. However, the compute endpoint is periodically\nenabled by check_availability operations.\n",
                                 "type": "boolean"
                             },
                             "passwordless_access": {

diff --git a/sdk.go b/sdk.go
@@ -635,8 +635,10 @@ func (c Client) GetCurrentUserInfo() (CurrentUserInfoResponse, error) {
 // If the list is empty, all IP addresses are allowed.
 // If primary_branch_only is true, the list will be applied only to the primary branch.
 type AllowedIps struct {
-	Ips               []string `json:"ips"`
-	PrimaryBranchOnly bool     `json:"primary_branch_only"`
+	// Ips A list of IP addresses that are allowed to connect to the endpoint.
+	Ips []string `json:"ips"`
+	// PrimaryBranchOnly If true, the list will be applied only to the primary branch.
+	PrimaryBranchOnly bool `json:"primary_branch_only"`
 }
 
 type ApiKeyCreateRequest struct {