Merge branch 'main' into fix/add_missing_temp_error_code

Author: cgoetz-inovex

.github/labeler.yml

@@ -0,0 +1,58 @@
+# access
+"domain:Access":
+- changed-files:
+  - any-glob-to-any-file:
+    - "services/alb/*"
+    - "services/albwaf/*"
+    - "services/cdn/*"
+    - "services/loadbalancer/*"
+    - "services/vpn/*"
+# runtimes
+"domain:Runtimes":
+- changed-files:
+  - any-glob-to-any-file:
+    - "services/ske/*"
+# support
+# no support domain sdk modules available yet
+# central services
+"domain:CentralServices":
+- changed-files:
+  - any-glob-to-any-file:
+    - "services/dns/*"
+    - "services/git/*"
+    - "services/intake/*"
+    - "services/kms/*"
+    - "services/kms/*"
+    - "services/logs/*"
+    - "services/modelserving/*"
+    - "services/observability/*"
+    - "services/rabbitmq/*"
+    - "services/redis/*"
+    - "services/secretsmanager/*"
+# databases
+"domain:Databases":
+- changed-files:
+  - any-glob-to-any-file:
+    - "services/mongodbflex/*"
+    - "services/mariadb/*"
+    - "services/sqlserverflex/*"
+    - "services/postgresflex/*"
+# IaaS
+"domain:IaaS":
+- changed-files:
+  - any-glob-to-any-file:
+    - "services/iaas/*"
+    - "services/objectstorage/*"
+    - "services/runcommand/*"
+    - "services/serverbackup/*"
+    - "services/serverupdate/*"
+    - "services/sfs/*"
+# core platform
+"domain:CorePlatform":
+- changed-files:
+  - any-glob-to-any-file:
+    - "services/auditlog/*"
+    - "services/authorization/*"
+    - "services/resourcemanager/*"
+    - "services/serviceaccount/*"
+    - "services/serviceenablement/*"

.github/workflows/ci.yaml

@@ -8,7 +8,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest]
-        go-version: ["1.21", "1.22", "1.23", "1.24", "1.25"]
+        go-version: ["1.25", "1.26"]
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout
@@ -32,7 +32,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@v5
         with:
-          go-version: 1.21
+          go-version: 1.25
       - name: Install project tools and dependencies
         run: make project-tools
       - name: Lint

.github/workflows/labeler.yaml

@@ -0,0 +1,19 @@
+name: "Labeler"
+on:
+  pull_request:
+    types: [opened, synchronize]
+  workflow_dispatch:
+
+jobs:
+  labeler:
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+    name: "Labeler"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Labeler action
+        uses: actions/labeler@v6
+        with:
+          sync-labels: false

CHANGELOG.md

@@ -15,7 +15,7 @@ The usage of the SDK is shown in some [examples](https://github.com/stackitcloud
 
 ## Getting started
 
-Requires `Go 1.21` or higher.
+Requires `Go 1.25` or higher.
 
 To download the `core` module:
 
@@ -269,4 +269,4 @@ See the [release documentation](./RELEASE.md) for further information.
 
 ## License
 
-Apache 2.0
+Apache 2.0

README.md

@@ -1,7 +1,16 @@
-## v0.24.0
+## v0.26.0
 - **Feature:** Add `SetRetryHttpErrorStatusCodes` to waiter to be able to configure the errors to retry on
 - **New:** add missing StatusServiceUnavailable to list of retry codes
 
+## v0.25.0
+- Minimal go version is now Go 1.25
+
+## v0.24.1
+- **Improvement:** Fix misleading error messages in authentication setup and credentials parsing.
+
+## v0.24.0
+- **Bugfix:** Allow setting waiter timeouts via context, that are longer than the default timeout.
+
 ## v0.23.0
 - **New:** Add new `WaiterHelper` struct, which creates an `AsyncActionCheck` function based on the configuration 
 

core/CHANGELOG.md

@@ -1 +1 @@
-v0.24.0
+v0.26.0

core/VERSION

@@ -54,7 +54,7 @@ func SetupAuth(cfg *config.Configuration) (rt http.RoundTripper, err error) {
 	} else if cfg.WorkloadIdentityFederation {
 		wifRoundTripper, err := WorkloadIdentityFederationAuth(cfg)
 		if err != nil {
-			return nil, fmt.Errorf("configuring no auth client: %w", err)
+			return nil, fmt.Errorf("configuring workload identity federation client: %w", err)
 		}
 		return wifRoundTripper, nil
 	} else if cfg.ServiceAccountKey != "" || cfg.ServiceAccountKeyPath != "" {
@@ -278,7 +278,7 @@ func readCredentialsFile(path string) (*Credentials, error) {
 	var credentials Credentials
 	err = json.Unmarshal(credentialsRaw, &credentials)
 	if err != nil {
-		return nil, fmt.Errorf("unmaPrivateKeyrshalling credentials: %w", err)
+		return nil, fmt.Errorf("unmarshalling credentials: %w", err)
 	}
 	return &credentials, nil
 }

core/auth/auth.go

@@ -15,6 +15,7 @@ import (
 
 	"github.com/golang-jwt/jwt/v5"
 	"github.com/google/uuid"
+
 	"github.com/stackitcloud/stackit-sdk-go/core/clients"
 	"github.com/stackitcloud/stackit-sdk-go/core/config"
 )
@@ -367,6 +368,18 @@ func TestReadCredentials(t *testing.T) {
 	}
 }
 
+func TestReadCredentialsFileErrorMessage(t *testing.T) {
+	setTemporaryHome(t)
+
+	_, err := readCredentialsFile("test_resources/test_invalid_structure.json")
+	if err == nil {
+		t.Fatalf("error expected")
+	}
+	if !strings.Contains(err.Error(), "unmarshalling credentials") {
+		t.Fatalf("expected unmarshalling credentials error, got %s", err)
+	}
+}
+
 func TestDefaultAuth(t *testing.T) {
 	privateKey, err := generatePrivateKey()
 	if err != nil {
@@ -768,6 +781,23 @@ func TestKeyAuthPemInsteadOfJsonKeyErrorHandling(t *testing.T) {
 	}
 }
 
+func TestSetupAuthWorkloadIdentityErrorMessage(t *testing.T) {
+	setTemporaryHome(t)
+	t.Setenv("STACKIT_SERVICE_ACCOUNT_EMAIL", "")
+	t.Setenv("STACKIT_FEDERATED_TOKEN_FILE", "")
+
+	_, err := SetupAuth(&config.Configuration{WorkloadIdentityFederation: true})
+	if err == nil {
+		t.Fatalf("error expected")
+	}
+	if !strings.Contains(err.Error(), "configuring workload identity federation client") {
+		t.Fatalf("expected workload identity federation error, got %s", err)
+	}
+	if strings.Contains(err.Error(), "configuring no auth client") {
+		t.Fatalf("unexpected no auth error message: %s", err)
+	}
+}
+
 func TestNoAuth(t *testing.T) {
 	for _, test := range []struct {
 		desc string

core/auth/auth_test.go

@@ -9,6 +9,7 @@ import (
 	"time"
 
 	"github.com/golang-jwt/jwt/v5"
+
 	"github.com/stackitcloud/stackit-sdk-go/core/oapierror"
 )