v0.9.0

This version is deprecated. Install the latest release.

Change logs

Support CFEE org, space and user management

This release adds a set of CFEE commands to manage CF orgs, spaces and roles without targeting/logging into the CFEE environment

Rename Linux installer script from install_bluemix_cli to install

This is part of the rebranding of Bluemix to IBM Cloud. install_bluemix_cli is deprecated but will be kept for a period of time before it is completely removed.

Migrate to new API for creating app from template and managing domain certificates

The following commands now use a new version of IBM Cloud API

• catalog template-run
• app domain-cert
• app domain-cert-add
• app domain-cert-remove

Filter hidden services on resource catalog

If a service is hidden on resource catalog, it won't show up in the following commands:

• catalog service
• catalog service-marketplace
• resource service-instance-create

New Commands

• cfee orgs: list all orgs
• cfee org: show details of an org
• cfee org-create: create an org
• cfee org-delete: delete an org
• cfee org-users: display users in specified org by role
• cfee org-role-set: assign an org role to a user (org manager required)
• cfee org-role-unset: remove an org role from a user (org manager or user him/herself only)
• cfee spaces: list all spaces
• cfee space: show details of a space
• cfee space-create: create a new space
• cfee space-rename: rename a space
• cfee space-delete: delete a space
• cfee space-role-set: assign a space role to a user
• cfee space-role-unset: remove a space role from a user
• cfee space-roles: get all space roles of current user
• cfee space-users: display users in a space by role

Updated Commands

• login and update now show release note link URL after successful upgrade
• login adds --no-account option which will enforce logging without an account
• target --cf provides tips of how to create an org if there is no org found
• resource search adds --sort-by option
• The following commands deprecated --json, and adds --output FORMAT
• account orgs
• account org
• account spaces
• account space
• billing account-usage
• billing resource-group-usage
• billing resource-instances-usage
• billing org-usage
• iam service-policies
• iam service-policy

Defects Fixing

• String Show Help is not translated
• CFEE cache not cleared when switching to another CFEE environment

other changes

• Change environment variable prefix from BLUEMIX to IBMCLOUD
  • BLEUMIX_COLOR -> IBMCLOUD_COLOR
  • BLEUMIX_ANALYTICS -> IBMCLOUD_ANALYTICS
  • BLEUMIX_VERSION_CHECK -> IBMCLOUD_VERSION_CHECK
  • BLEUMIX_HTTP_TIMEOUT -> IBMCLOUD_HTTP_TIMEOUT
  • BLEUMIX_TRACE -> IBMCLOUD_TRACE
  • BLEUMIX_HOME -> IBMCLOUD_HOME

v0.8.0

This version is deprecated. Install the latest release.

Change logs

Support aliasing for plug-in name and command namespace

Now multiple names can be defined for plugin and command namespace. Users can search and update with any valid names.

Target resource group In dedicated environments

For dedicated environment which has IAM token service enabled, targeting a resource group in login and target command is supported so that dedicated cloud resources can be placed into a resource group

Installing to user specified directory

This release supports installing IBM Cloud CLI to a custom directory from a binary package instead of the system directory when installing from installer or shell. Refer to document here for more details.

Updated Commands

• target --cf now skips failed CFEE environments
• resource services --long now returns Resource ID
• resource service-instances returns only resource with service instance type

Defects Fixing

• resource service-instance-delete shows duplicated ID in message when using ID to delete service instance
• sl block volume-list returns runtime error
• incorrect account org check in target -c “” -o ORG
• plugin download doesn't honor --skip-ssl-validation flag
• account can be unset when logging with --api-key which belongs to an account

v0.7.1

This version is deprecated. Install the latest release.

Change logs

Updated commands

• iam service-key-create and iam service-binding-create no longer check whether the target deployment is IAM compatible
• resource service-instance-create will throw error if multiple services have the same name

Defects fixing

• bx target --cf fails on Windows

v0.7.0

This version is deprecated. Install the latest release.

Change logs

Support Cloud Foundry Enterprise Environment (CFEE)

IBM Cloud Foundry Enterprise Environment provides a tenant-specific Cloud Foundry environment for hosting a customer’s applications allowing compute isolation, administrative control and change management for the environment. This release adds the command lines to query the CFEE environments, show the detailed stats of a CFEE environment, the capability to select and target a CFEE environment so that the bundled cf cli can be used to manage the CFEE resources, and also the capability to alias a service instance into CFEE and bind to a CFEE application.

Support migration of Cloud Foundry service instance to resource group

This release adds the command to migrate a Cloud Foundry service instance to RC compatible service instance in a resource group if it is supported by the service

Add lock and unlock capability for service ID and API keys

Accidental deletion of service ID and API key may cause service outage. This release adds lock/unlock capability for service ID and API keys to help the user to prevent that.

Support global tagging of resources

This release incorporates a set of commands for managing the tags of Cloud resources

New commands

• cfee environments: list the CFEE environments visible to the current user
• cfee environment : show the detailed stats of a CFEE environment
• resource cf-service-instance-migrate: migrate a Cloud Foundry service instance to RC compatible service instance in a resource group
• resource tags: list all tags
• resource tag : show details of a tag
• resource tag-create: create a tag
• resource tag-delete: delete a tag
• resource tag-attach: add a tag to a resource
• resource tag-detach: remove a tag from a resource
• resource tag-update: switch user tag to restricted tag and vice versa
• iam service-id-lock: lock a service ID
• iam service-id-unlock: unlock a service ID
• iam api-key-lock: lock an API key
• iam api-key-unlock: unlock an API key
• iam service-api-key-lock: lock a service api key
• iam service-api-key-unlock: unlock a service api key

Updated commands

• target -r REGION now shows "not supported" instead of "not found" for regions that don't have cloud foundry deployment
• resource service-instance, resource service-instance-update and resource service-instance-delete now allow using ID as argument
• target --cf allows user to select and target either a public Cloud Foundry instance or CFEE environment
• target --cf-api allows user to target a public Cloud Foundry instance or CFEE environment by specifying the api endpoint of the Cloud Foundry instance
• resource service-alias-create supports creating a service alias in CFEE environment
• resource service-binding-create allows binding a service instance to a CFEE application
• -v, --version option is removed from iam access-group-policy-update, iam service-api-key-update, iam service-policy-update and iam user-policy-update
• iam service-ids, iam api-keys and iam service-api-keys add a column to indicate whether the service ID or key is locked or not
• iam service-id-create, iam api-key-create and iam service-api-key-create add --lock function to lock the service ID or api key when it is created.
• iam service-id-update, iam service-id-delete, iam api-key-update, iam api-key-delete, iam service-api-key-update and iam service-api-key-delete will fail if the service ID or api key is locked.
• iam access-group-policy-create, iam access-group-policy-update, iam user-policy-create, iam user-policy-update, iam service-policy-create and iam sevice-policy-update add validation of resource group
• account user-delete changes to account user-remove
• account user-invite provide options (-o, --org-role, -s, --space-role) to invite a user to org/space.

Defects fixing

• Some commands shows "not logged in" when user logs in dedicated environment with --no-iam option
• target --cf fails when IAM token expires
• iam oauth-tokens fails when logging in with --no-iam option
• Authorization policy created from iam authorization-policy-create does not work when specifying the service instance in the policy

Other changes

• Upgrade to Golang 1.9.6
• Auto-completion is removed from system shell setting. The user needs to enable it by him/herself by sourcing the script in the user shell profile
• Installation path changes from /usr/local/Bluemix to /usr/local/ibmcloud

v0.6.7

This version is deprecated. Install the latest release.

Change logs

Remove Cloud Foundry UAA token retrieval when logging in IBM Cloud

Given Cloud Foundry is only one of the services provided by IBM Cloud, the logging into CF to retrieve UAA tokens is removed from the IBM Cloud login process by default. The user needs to use target -o -s or target --cf command to set/select a cloud foundry instance to manage the Cloud Foundry resources.

-o and -s options in login command are deprecated but still kept to maintain the compatibility.

Support access group and assigning policies to access group

Access group allows to organize users and service IDs into a group and manage access by assigning policies to the group. This release adds the command line support for access group, including both the CRUD of access groups and management of IAM policies for the access group.

Support Linux for PPC64le

Starting from this release, Linux for PPC64le architecture is formally supported. This is only for IBM Cloud CLI and does not include the plug-ins. Go to IBM Cloud CLI plug-in repository to check the os and platforms supported by each plug-in.

Rebrand the command line from bluemix to ibmcloud

The name of IBM Cloud CLI is formally changed to ibmcloud starting from this release. The previous long name bluemix and short name bx are still supported and kept for a period of time until they are formally deprecated.

Support searching resource globally

This release added the capability to search cloud resources globally using Lucene query syntax with command resource search.

New commands

• iam access-groups List all the access groups
• iam access-group Show details of an access group
• iam access-group-create Create an access group
• iam access-group-update Update the name and description of an access group
• iam access-group-delete Delete an access group
• iam access-group-user-add Add users to an access group
• iam access-group-user-remove Remove a user from an access group
• iam access-group-user-purge Remove a user from all access groups
• iam access-group-users List users of an access groups
• iam access-group-service-id-add Add service IDs to an access group
• iam access-group-service-id-remove Remove a service ID from an access group
• iam access-group-service-id-purge Remove a service ID from all access groups
• iam access-group-service-ids List service IDs of an access groups
• iam access-group-policies List policies of an access group
• iam access-group-policy Show details of an access group policy
• iam access-group-policy-create Create an access group policy
• iam access-group-policy-update Update an access group policy
• iam access-group-policy-delete Delete an access group policy
• resource search Search resources using Lucene query syntax

Updated commands

• regions lists all the regions no matter there is cloud foundry service or not
• login shows how to login with api key and one-time passcode when authentication is rejected because of using a federated ID or MFA is required
• update changes the default answer to 'N' when confirming whether to update now
• runtime and runtimes commands only support public cloud
• Allows using uuid beside name in service ID, service ID policy and Service ID api key management
  • iam sevice-id
  • iam service-id-update
  • iam service-id-delete
  • iam service-policies
  • iam service-policy
  • iam service-policy-create
  • iam service-policy-update
  • iam service-policy-delete
  • iam service-api-keys
  • iam service-api-key
  • iam service-api-key-create
  • iam service-api-key-update
  • iam service-api-key-delete
• iam service-api-keys, iam service-api-key, iam service-api-key-create, iam service-api-key-update, iam service-api-key-delete add --force option to fail the command when multiple service IDs are found for the given service ID name
• resource service-instance shows "Last Operation" information of the service instance

Removed Commands

• catalog template-run

Defects fixing

• incorrect accept-language header when sending HTTP request
• only account owner can invite user to the account
• iam user-policy, iam user-policies, iam service-policy, iam service-policies are not showing service and resource fields when the policy is applied to resource group members.

Other changes

• Environment variables BLUEMIX_TRACE and BLUEMIX_COLOR now apply to Cloud Foundry commands as well.
• Added additional environment variables BLUEMIX_ANLALYTICS, BLUEMIX_VERSION_CHECK, BLUEMIX_HTTP_TIMEOUT to overwrite the settings in configuration file

v0.6.6

This version is deprecated. Install the latest release.

Change logs

Several change in login

• Add -g flag to specify the targeted resource group
• Show detailed message when authentication fails
• Enforce account selection when the user is associated with account(s)
• Target the account automatically when specifying org with -o option
• Deprecate -o and -s flags ( use target to specify CF org and space)

Updated Commands

• For billing commands listed below, remove the restriction of account owner.
  • account-usage, resource-group-usage, resource-instances-usage, org-usage
• service-instance-create command:
  • Prompt for selection if multiple deployments have the same name
  • Add --deployment flag to resolving duplicated deployment names
• bx update -f uses silent install mode ( root privilege is required)

Fixed defects

• login -o does not set org in non-public environment
• iam authorization-policies shows nothing when there is no authorization policy(should show "not found" message)
• cf ssh hangs in windows version
• cf [command] lost color in windows version
• account org lost inlined properties(domain, quota) of an organization
• Incorrect command usage description in iam service-api-key-delete
• Fix a regression which breaks autocomplete on macOS

v0.6.5

This version is deprecated. Install the latest release.

Change logs

Add support for authorization policy

A few IAM policy commands are added to provide service-to-service authorization support.

Add resource group support for billing commands

This release moves to a new version of billing and usage api which enables the capability to query usage summary by resource group and resource instance usage details in a given resource group or organization.

New commands

• iam authorization-policies： list authorization policies under current account
• iam authorization-policy: show details of an authorization policy
• iam authorization-policy-create: create an authorization policy
• iam authorization-policy-delete: delete an authorization policy
• billing resource-group-usage: show monthly usage for a resource group
• billing resource-instances-usage: show monthly resource instances usage
• catalog runtimes: show the list of runtimes
• catalog runtime: show the details of a runtime

Updated commands

• bluemix resource service-instance-update: remove --update-time option

Fixed defects

• Error message for unregistered commands is not translated
• bash: PROGS: readonly variable warning message in bash shell sessions

v0.6.4

This version is deprecated. Install the latest release.

Change logs

Enable parameters when creating resource binding and resource key

-p, --parameters flag is provided in resource service-binding-create and resource service-key-create commands to support custom parameters.

Adopt POSIX sh as the default shell environment for Linux and macOS installers

Some bashisms are removed from install scripts to make installers work under POSIX sh (i.e. #!/bin/sh),

Updated commands

• bluemix update add -f flag to to force update without confirmation
• bluemix api and bluemix login show information regarding how to disable version check

v0.6.3

This version is deprecated. Install the latest release.

Change logs

Move from global catalog API v1-bata to v1

This release moves to v1 API of global catalog, and incorporates several catalog metadata changes in v1 API.

Refresh configurations before running commands

This version now checks the integrity of the configurations, and refresh them if necessary, before running a command.

Rebranding from 'Bluemix' to 'IBM Cloud'

This release changes the word Bluemix in command descriptions, help messages and installers to IBM Cloud. Commands syntax stays unchanged.

Softlayer command line enhancements

This release adds several new commands for Softlayer block storage service, security group and virtual servers.

New commands

• sl block access-password change a password for a volume's access
• sl block volume-count list number of block storage volumes per datacenter
• sl block volume-set-lun-id set the LUN ID on an existing block storage volume
• sl file volume-count list number of file storage volumes per datacenter
• sl securitygroup create create a security group
• sl securitygroup list list security groups
• sl securitygroup delete delete the given security group
• sl securitygroup detail get details about a security group
• sl securitygroup edit edit details of a security group
• sl securitygroup interface-add attach an interface to a security group
• sl securitygroup interface-list list interfaces associated with security group
• sl securitygroup interface-remove detach an interface from a security group
• sl securitygroup rule-add add a security group rule to a security group
• sl securitygroup rule-edit edit a security group rule in a security group
• sl securitygroup rule-list list security group rules
• sl securitygroup rule-remove remove a rule from a security group
• sl vs host-create create a host for dedicated virtual servers
• sl vs host-list list dedicated hosts on your account

Updated commands

• resource service-instance-create changes -r option to LOCATION argument
• plugin show now shows the SDK version
• regions lists public regions if no api endpoint set
• iam service-policy-update and iam user-policy-update resets the policy definition from inputs, instead of applying incremental changes

Defect fixing

• app domain-cert-add doesn't encode password

other changes

• Improve error handling for some commands

v0.6.2

This version is deprecated. Install the latest release.

Change logs

Public IAM support for dedicated environments

This release enables the dedicated environment users to be able to authenticate with public IAM service and connect the IBM ID for public cloud with existing dedicated ID. This allows the dedicated users to be able to use public IAM service for authentication and access policy management.

Identity and access management enhancements

This release incorporates the following changes in identify and access management

• uses service-id as argument to create/update/delete service api key, instead of "bound_to" CRN
• adopts global IAM service endpoint
• adds resource group scope support for IAM policies

NTLM proxy support for Windows

The Windows version now supports NTLM proxy authentication. If environment variable NTLM_PROXY is set, then Bluemix cli uses NTLM protocol to authenticate with the proxy specified by HTTPS_PROXY. The bundled cf will do the same.

Resource control command refactoring

This release has several changes on the resource control command names, argument/option names and help messages for the consistency of terminologies.

• resource instances changes to resource service-instances
• resource instance changes to resource service-instance
• resource instance-create changes to resource service-instance-create
• resource instance-update changes to resource service-instance-update
• resource instance-delete changes to resource service-instance-delete
• resource key-create changes to resource service-key-create
• resource keys changes to resource service-keys
• resource key changes to resource service-key
• resource key-delete changes to resource service-key-delete
• resource bindings changes to resource service-bindings
• resource binding changes to resource service-binding
• resource binding-create changes to resource service-binding-create
• resource binding-delete changes to resource service-binding-delete
• resource aliases changes to resource service-aliases
• resource alias changes to resource service-alias
• resource alias-create changes to resource service-alia-create
• resource alias-update changes to resource service-alia-update
• resource alias-delete changes to resource service-alia-delete

New commands

• resource group-create create a resource group under an account besides the default resource group of the account
• iam dedicated-id-disconnect to tear down the connection between public IBM ID and ID of the dedicated environment
• catalog service shows details of a catalog entry
• catalog locations list deployment environments geolocation
• catalog entry-copy duplicate an existing catalog entry

Updated commands

• login command goes to public IAM service for authentication if the dedicated environment is configured to use pubic IAM service. It fails the login if IBM ID and dedicated ID connection is not established. It also display the ID connections if login is successful
• account spaces adds '-r' and '-o' options to specify a different region and organization
• account org-roles adds '-u' option to specify a different user than the current user
• plugin show removes the preceding tab in the command display
• account users allows any user associated with the account to be able to list the account users, instead of account owner only
• sl init allows two phase authentication
• account user-invite does not require target org/space and roles
• account org-create is disabled for dedicated and local environments

Defect fixing

• EOF error is ignored in prompts
• login goes to interactive mode when specified api key or password is not correct
• Check IAM token as prerequisite for account users, account user-invite, account user-reinvite, account user-delete and account org-roles

other changes

• upgraded to Golang 1.9.2