granny-devops 0.15.0__tar.gz → 0.16.0__tar.gz

{granny_devops-0.15.0 → granny_devops-0.16.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: granny-devops
-Version: 0.15.0
+Version: 0.16.0
 Summary: Cloud tools collection -- AWS infrastructure, CDN, and DevOps automation
 Author-email: Martin Wieser <martin.wieser@pseekoo.com>
 License: MIT License
@@ -257,6 +257,10 @@ granny storage aws create my-website --website
 granny analyze vpcs --json-output
 granny analyze lambdas --region us-east-1 eu-west-1
 
+# AWS Bedrock -- foundation models (read-only; on-demand access auto-enables on first invoke)
+granny aws bedrock list-models --profile lularge --region eu-central-1 --by-provider Anthropic
+granny aws bedrock check-access --model-id anthropic.claude-sonnet-4-20250514-v1:0 --profile lularge --region eu-central-1
+
 # Cross-cloud GPU / credit / cost inventory (AWS + GCP + Azure)
 granny analyze gpus                                # running GPUs everywhere
 granny analyze gpus --filter h100,h200             # find Hopper clusters
@@ -329,8 +333,15 @@ granny elk add-user user@example.com \
 granny azure account whoami                                  # signed-in identity
 granny azure account list                                    # subscriptions
 granny azure deployment list --subscription <id> --all-groups
+granny azure group create --subscription <id> --name <rg> --location swedencentral
 granny azure openai accounts --subscription <id>
-granny azure openai deployments --subscription <id> --kind OpenAI
+granny azure openai account create --subscription <id> --resource-group <rg> \
+    --name <acct> --location swedencentral                   # create an Azure OpenAI account
+granny azure openai keys --subscription <id> --resource-group <rg> --account <acct>
+granny azure openai deployments --subscription <id> --kind OpenAI --with-usage  # + created_at & last-used (Azure Monitor)
+granny azure openai deployment create --subscription <id> --resource-group <rg> \
+    --account <acct> --name gpt-5.4 --model gpt-5.4 --model-version 2026-03-05 \
+    --sku GlobalStandard --capacity 50                       # create a model deployment
 granny azure webapp list --subscription <id>
 granny azure vm-sizes list --subscription <id> --location polandcentral
 granny azure vm list --subscription <id>                      # running VMs + power state

{granny_devops-0.15.0 → granny_devops-0.16.0}/README.md

@@ -124,6 +124,10 @@ granny storage aws create my-website --website
 granny analyze vpcs --json-output
 granny analyze lambdas --region us-east-1 eu-west-1
 
+# AWS Bedrock -- foundation models (read-only; on-demand access auto-enables on first invoke)
+granny aws bedrock list-models --profile lularge --region eu-central-1 --by-provider Anthropic
+granny aws bedrock check-access --model-id anthropic.claude-sonnet-4-20250514-v1:0 --profile lularge --region eu-central-1
+
 # Cross-cloud GPU / credit / cost inventory (AWS + GCP + Azure)
 granny analyze gpus                                # running GPUs everywhere
 granny analyze gpus --filter h100,h200             # find Hopper clusters
@@ -196,8 +200,15 @@ granny elk add-user user@example.com \
 granny azure account whoami                                  # signed-in identity
 granny azure account list                                    # subscriptions
 granny azure deployment list --subscription <id> --all-groups
+granny azure group create --subscription <id> --name <rg> --location swedencentral
 granny azure openai accounts --subscription <id>
-granny azure openai deployments --subscription <id> --kind OpenAI
+granny azure openai account create --subscription <id> --resource-group <rg> \
+    --name <acct> --location swedencentral                   # create an Azure OpenAI account
+granny azure openai keys --subscription <id> --resource-group <rg> --account <acct>
+granny azure openai deployments --subscription <id> --kind OpenAI --with-usage  # + created_at & last-used (Azure Monitor)
+granny azure openai deployment create --subscription <id> --resource-group <rg> \
+    --account <acct> --name gpt-5.4 --model gpt-5.4 --model-version 2026-03-05 \
+    --sku GlobalStandard --capacity 50                       # create a model deployment
 granny azure webapp list --subscription <id>
 granny azure vm-sizes list --subscription <id> --location polandcentral
 granny azure vm list --subscription <id>                      # running VMs + power state

{granny_devops-0.15.0 → granny_devops-0.16.0}/granny/__init__.py

@@ -1,6 +1,6 @@
 """Granny -- Cloud tools collection for AWS infrastructure and DevOps automation."""
 
-__version__ = "0.15.0"
+__version__ = "0.16.0"
 __all__ = [
     "get_secret",
     "load_secrets_into_env",

{granny_devops-0.15.0 → granny_devops-0.16.0}/granny/cli/zitadel.py

@@ -128,6 +128,68 @@ def create_oidc_app_cmd(
     )
 
 
+@zitadel.command("set-redirect-uris")
+@click.option("--project", required=True, help="Project name or id owning the app.")
+@click.option("--app", "app_name", required=True, help="OIDC app name.")
+@click.option(
+    "--redirect-uri",
+    "redirect_uris",
+    multiple=True,
+    required=True,
+    help="Allowed OIDC redirect URI (repeatable).",
+)
+@click.option(
+    "--post-logout-uri",
+    "post_logout_uris",
+    multiple=True,
+    help="Post-logout redirect URI to add (repeatable).",
+)
+@click.option(
+    "--replace",
+    is_flag=True,
+    help="Replace the redirect-URI set instead of merging with the existing one.",
+)
+@click.option("--dry-run", is_flag=True)
+def set_redirect_uris_cmd(
+    project: str,
+    app_name: str,
+    redirect_uris: tuple[str, ...],
+    post_logout_uris: tuple[str, ...],
+    replace: bool,
+    dry_run: bool,
+) -> None:
+    """Set an existing OIDC app's allowed redirect URIs (idempotent).
+
+    Merges with the app's current redirect URIs by default (union, de-duped),
+    so re-running with the same set is a no-op. Use ``--replace`` to set exactly
+    the URIs given.
+    """
+    client = _client()
+    found = client.find_project(project)
+    project_id = found["id"] if found else project
+    app = client.find_oidc_app(project_id, app_name)
+    if not app:
+        raise click.ClickException(
+            f"OIDC app {app_name!r} not found in project {project!r}"
+        )
+    app_id = app.get("id")
+    if dry_run:
+        verb = "replace with" if replace else "merge in"
+        click.echo(
+            f"[DRY RUN] Would {verb} redirect URIs on app {app_name!r} "
+            f"({app_id}): {list(redirect_uris)}"
+        )
+        return
+    result = client.set_oidc_app_redirects(
+        project_id,
+        app_id,  # type: ignore[arg-type]
+        list(redirect_uris),
+        replace=replace,
+        post_logout_uris=list(post_logout_uris),
+    )
+    click.echo(json.dumps(result, indent=2))
+
+
 @zitadel.command("enforce-mfa")
 @click.option(
     "--no-passkey",

{granny_devops-0.15.0 → granny_devops-0.16.0}/granny/zitadel/client.py

@@ -262,6 +262,53 @@ class ZitadelClient:
             "POST", f"/management/v1/projects/{project_id}/apps/oidc", body=body
         )
 
+    def set_oidc_app_redirects(
+        self,
+        project_id: str,
+        app_id: str,
+        redirect_uris: list[str],
+        *,
+        replace: bool = False,
+        post_logout_uris: list[str] | None = None,
+    ) -> dict[str, Any]:
+        """Set an existing OIDC app's redirect URIs (idempotent).
+
+        Reads the app's current ``oidcConfig`` and PUTs it back with the merged
+        redirect URIs (Zitadel's update endpoint replaces the whole config, so
+        every field is round-tripped). With ``replace=False`` (default) the new
+        URIs are unioned with the existing set — order-stable, de-duplicated —
+        so re-running with the same URIs is a no-op. ``replace=True`` sets
+        exactly ``redirect_uris``.
+        """
+        oidc = dict(self.get_app(project_id, app_id).get("oidcConfig") or {})
+        existing = list(oidc.get("redirectUris") or [])
+        merged = (
+            list(dict.fromkeys(redirect_uris))
+            if replace
+            else list(dict.fromkeys([*existing, *redirect_uris]))
+        )
+        merged_logout = list(
+            dict.fromkeys([*(oidc.get("postLogoutRedirectUris") or []), *(post_logout_uris or [])])
+        )
+        body = {
+            "redirectUris": merged,
+            "responseTypes": oidc.get("responseTypes") or ["OIDC_RESPONSE_TYPE_CODE"],
+            "grantTypes": oidc.get("grantTypes")
+            or ["OIDC_GRANT_TYPE_AUTHORIZATION_CODE", "OIDC_GRANT_TYPE_REFRESH_TOKEN"],
+            "appType": oidc.get("appType") or "OIDC_APP_TYPE_WEB",
+            "authMethodType": oidc.get("authMethodType") or "OIDC_AUTH_METHOD_TYPE_BASIC",
+            "postLogoutRedirectUris": merged_logout,
+            "version": oidc.get("version") or "OIDC_VERSION_1_0",
+            "devMode": oidc.get("devMode", False),
+            "accessTokenType": oidc.get("accessTokenType") or "OIDC_TOKEN_TYPE_JWT",
+        }
+        self.request(
+            "PUT",
+            f"/management/v1/projects/{project_id}/apps/{app_id}/oidc_config",
+            body=body,
+        )
+        return {"appId": app_id, "redirectUris": merged}
+
     # ── Login policy / MFA ───────────────────────────────────────────────
 
     def get_login_policy(self) -> dict[str, Any]:

{granny_devops-0.15.0 → granny_devops-0.16.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "granny-devops"
-version = "0.15.0"
+version = "0.16.0"
 description = "Cloud tools collection -- AWS infrastructure, CDN, and DevOps automation"
 readme = "README.md"
 license = { file = "LICENSE" }