Onboard object storage credentials

docs/stackit_object-storage.md

@@ -29,6 +29,7 @@ stackit object-storage [flags]
 
 * [stackit](./stackit.md)	 - Manage STACKIT resources using the command line
 * [stackit object-storage bucket](./stackit_object-storage_bucket.md)	 - Provides functionality for Object Storage buckets
+* [stackit object-storage credentials](./stackit_object-storage_credentials.md)	 - Provides functionality for Object Storage credentials
 * [stackit object-storage credentials-group](./stackit_object-storage_credentials-group.md)	 - Provides functionality for Object Storage credentials group
 * [stackit object-storage disable](./stackit_object-storage_disable.md)	 - Disables Object Storage for a project
 * [stackit object-storage enable](./stackit_object-storage_enable.md)	 - Enables Object Storage for a project

docs/stackit_object-storage_credentials.md

@@ -0,0 +1,34 @@
+## stackit object-storage credentials
+
+Provides functionality for Object Storage credentials
+
+### Synopsis
+
+Provides functionality for Object Storage credentials.
+
+```
+stackit object-storage credentials [flags]
+```
+
+### Options
+
+```
+  -h, --help   Help for "stackit object-storage credentials"
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, one of ["json" "pretty"]
+  -p, --project-id string      Project ID
+```
+
+### SEE ALSO
+
+* [stackit object-storage](./stackit_object-storage.md)	 - Provides functionality regarding Object Storage
+* [stackit object-storage credentials create](./stackit_object-storage_credentials_create.md)	 - Creates credentials for an Object Storage credentials group
+* [stackit object-storage credentials delete](./stackit_object-storage_credentials_delete.md)	 - Deletes credentials of an Object Storage credentials group
+* [stackit object-storage credentials list](./stackit_object-storage_credentials_list.md)	 - Lists all credentials for an Object Storage credentials group
+

docs/stackit_object-storage_credentials_create.md

@@ -0,0 +1,43 @@
+## stackit object-storage credentials create
+
+Creates credentials for an Object Storage credentials group
+
+### Synopsis
+
+Creates credentials for an Object Storage credentials group. The credentials are only displayed upon creation, and it will not be retrievable later.
+
+```
+stackit object-storage credentials create [flags]
+```
+
+### Examples
+
+```
+  Create credentials for a credentials group with ID xxx
+  $ stackit object-storage credentials create --credentials-group-id xxx
+
+  Create credentials for a credentials group with ID xxx, including a specific expiration date
+  $ stackit object-storage credentials create --credentials-group-id xxx --expire-date 2024-03-06T00:00:00.000Z
+```
+
+### Options
+
+```
+      --credentials-group-id string   Credentials Group ID
+      --expire-date string            Expiration date for the credentials, in a date-time with the RFC3339 layout format, e.g. 2024-01-01T00:00:00Z
+  -h, --help                          Help for "stackit object-storage credentials create"
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, one of ["json" "pretty"]
+  -p, --project-id string      Project ID
+```
+
+### SEE ALSO
+
+* [stackit object-storage credentials](./stackit_object-storage_credentials.md)	 - Provides functionality for Object Storage credentials
+

docs/stackit_object-storage_credentials_delete.md

@@ -0,0 +1,39 @@
+## stackit object-storage credentials delete
+
+Deletes credentials of an Object Storage credentials group
+
+### Synopsis
+
+Deletes credentials of an Object Storage credentials group
+
+```
+stackit object-storage credentials delete CREDENTIALS_ID [flags]
+```
+
+### Examples
+
+```
+  Delete a credential with ID "xxx" of credentials group with ID "yyy"
+  $ stackit object-storage credentials delete xxx --credentials-group-id yyy
+```
+
+### Options
+
+```
+      --credentials-group-id string   Credentials Group ID
+  -h, --help                          Help for "stackit object-storage credentials delete"
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, one of ["json" "pretty"]
+  -p, --project-id string      Project ID
+```
+
+### SEE ALSO
+
+* [stackit object-storage credentials](./stackit_object-storage_credentials.md)	 - Provides functionality for Object Storage credentials
+

docs/stackit_object-storage_credentials_list.md

@@ -0,0 +1,46 @@
+## stackit object-storage credentials list
+
+Lists all credentials for an Object Storage credentials group
+
+### Synopsis
+
+Lists all credentials for an Object Storage credentials group.
+
+```
+stackit object-storage credentials list [flags]
+```
+
+### Examples
+
+```
+  List all credentials for a credentials group with ID "xxx"
+  $ stackit object-storage credentials list --credentials-group-id xxx
+
+  List all credentials for a credentials group with ID "xxx" in JSON format
+  $ stackit object-storage credentials list --credentials-group-id xxx --output-format json
+
+  List up to 10 credentials for a credentials group with ID "xxx"
+  $ stackit object-storage credentials list --credentials-group-id xxx --limit 10
+```
+
+### Options
+
+```
+      --credentials-group-id string   Credentials Group ID
+  -h, --help                          Help for "stackit object-storage credentials list"
+      --limit int                     Maximum number of entries to list
+```
+
+### Options inherited from parent commands
+
+```
+  -y, --assume-yes             If set, skips all confirmation prompts
+      --async                  If set, runs the command asynchronously
+  -o, --output-format string   Output format, one of ["json" "pretty"]
+  -p, --project-id string      Project ID
+```
+
+### SEE ALSO
+
+* [stackit object-storage credentials](./stackit_object-storage_credentials.md)	 - Provides functionality for Object Storage credentials
+

docs/stackit_secrets-manager_user_create.md

@@ -4,7 +4,9 @@ Creates a Secrets Manager user
 
 ### Synopsis
 
-Creates a user for a Secrets Manager instance with generated username and password
+Creates a Secrets Manager user.
+The username and password are auto-generated and provided upon creation.
+A description can be provided to identify a user.
 
 ```
 stackit secrets-manager user create [flags]
@@ -13,17 +15,14 @@ stackit secrets-manager user create [flags]
 ### Examples
 
 ```
-  Create a Secrets Manager user for instance with ID "xxx"
-  $ stackit mongodbflex user create --instance-id xxx
-
   Create a Secrets Manager user for instance with ID "xxx" and description "yyy"
-  $ stackit mongodbflex user create --instance-id xxx --description yyy
+  $ stackit secrets-manager user create --instance-id xxx --description yyy
 
-  Create a Secrets Manager user for instance with ID "xxx" and doesn't display the password
-  $ stackit mongodbflex user create --instance-id xxx --hide-password
+  Create a Secrets Manager user for instance with ID "xxx" and hides the generated password
+  $ stackit secrets-manager user create --instance-id xxx --hide-password
 
   Create a Secrets Manager user for instance with ID "xxx" with write access to the secrets engine
-  $ stackit mongodbflex user create --instance-id xxx --write
+  $ stackit secrets-manager user create --instance-id xxx --write
 ```
 
 ### Options

internal/cmd/object-storage/credentials-group/create/create.go

@@ -18,12 +18,12 @@ import (
 )
 
 const (
-	nameFlag = "name"
+	credentialsGroupNameFlag = "name"
 )
 
 type inputModel struct {
 	*globalflags.GlobalFlagModel
-	DisplayName string
+	CredentialsGroupName string
 }
 
 func NewCmd() *cobra.Command {
@@ -51,7 +51,7 @@ func NewCmd() *cobra.Command {
 			}
 
 			if !model.AssumeYes {
-				prompt := fmt.Sprintf("Are you sure you want to create a credentials group with name %q?", model.DisplayName)
+				prompt := fmt.Sprintf("Are you sure you want to create a credentials group with name %q?", model.CredentialsGroupName)
 				err = confirm.PromptForConfirmation(cmd, prompt)
 				if err != nil {
 					return err
@@ -75,9 +75,9 @@ func NewCmd() *cobra.Command {
 }
 
 func configureFlags(cmd *cobra.Command) {
-	cmd.Flags().String(nameFlag, "", "Name of the group holding credentials")
+	cmd.Flags().String(credentialsGroupNameFlag, "", "Name of the group holding credentials")
 
-	err := flags.MarkFlagsRequired(cmd, nameFlag)
+	err := flags.MarkFlagsRequired(cmd, credentialsGroupNameFlag)
 	cobra.CheckErr(err)
 }
 
@@ -88,15 +88,15 @@ func parseInput(cmd *cobra.Command) (*inputModel, error) {
 	}
 
 	return &inputModel{
-		GlobalFlagModel: globalFlags,
-		DisplayName:     flags.FlagToStringValue(cmd, nameFlag),
+		GlobalFlagModel:      globalFlags,
+		CredentialsGroupName: flags.FlagToStringValue(cmd, credentialsGroupNameFlag),
 	}, nil
 }
 
 func buildRequest(ctx context.Context, model *inputModel, apiClient *objectstorage.APIClient) objectstorage.ApiCreateCredentialsGroupRequest {
 	req := apiClient.CreateCredentialsGroup(ctx, model.ProjectId)
 	req = req.CreateCredentialsGroupPayload(objectstorage.CreateCredentialsGroupPayload{
-		DisplayName: utils.Ptr(model.DisplayName),
+		DisplayName: utils.Ptr(model.CredentialsGroupName),
 	})
 	return req
 }

internal/cmd/object-storage/credentials-group/create/create_test.go

@@ -20,12 +20,12 @@ type testCtxKey struct{}
 var testCtx = context.WithValue(context.Background(), testCtxKey{}, "foo")
 var testClient = &objectstorage.APIClient{}
 var testProjectId = uuid.NewString()
-var testDisplayName = "test-name"
+var testCredentialsGroupName = "test-name"
 
 func fixtureFlagValues(mods ...func(flagValues map[string]string)) map[string]string {
 	flagValues := map[string]string{
-		projectIdFlag: testProjectId,
-		nameFlag:      testDisplayName,
+		projectIdFlag:            testProjectId,
+		credentialsGroupNameFlag: testCredentialsGroupName,
 	}
 	for _, mod := range mods {
 		mod(flagValues)
@@ -38,7 +38,7 @@ func fixtureInputModel(mods ...func(model *inputModel)) *inputModel {
 		GlobalFlagModel: &globalflags.GlobalFlagModel{
 			ProjectId: testProjectId,
 		},
-		DisplayName: testDisplayName,
+		CredentialsGroupName: testCredentialsGroupName,
 	}
 	for _, mod := range mods {
 		mod(model)
@@ -48,7 +48,7 @@ func fixtureInputModel(mods ...func(model *inputModel)) *inputModel {
 
 func fixturePayload(mods ...func(payload *objectstorage.CreateCredentialsGroupPayload)) objectstorage.CreateCredentialsGroupPayload {
 	payload := objectstorage.CreateCredentialsGroupPayload{
-		DisplayName: utils.Ptr(testDisplayName),
+		DisplayName: utils.Ptr(testCredentialsGroupName),
 	}
 	for _, mod := range mods {
 		mod(&payload)
@@ -107,7 +107,7 @@ func TestParseInput(t *testing.T) {
 		{
 			description: "display name missing",
 			flagValues: fixtureFlagValues(func(flagValues map[string]string) {
-				delete(flagValues, nameFlag)
+				delete(flagValues, credentialsGroupNameFlag)
 			}),
 			isValid: false,
 		},