cloudnx CLI

Cobra-based CLI for the CloudNx platform. Reads ~/.cloudnx/credentials (TOML, profile-keyed), exchanges access keys for a 15-min JWT once per invocation, and ships every operation the dashboard supports.

Install

Prebuilt binaries for macOS (Apple silicon and Intel), Linux (amd64, arm64) and Windows are provided to customers from Portal → API keys, alongside the access key the CLI needs. Public signed releases are on the roadmap.

# macOS / Linux — after downloading the binary for your platform
chmod +x cloudnx
sudo install -m 0755 cloudnx /usr/local/bin/

cloudnx --version
# cloudnx version 0.1.3

First-time setup

cloudnx configure
# CloudNx endpoint [https://cloudnx.in]:
# Access key ID:    AKIACLOUDNX0123456789
# Secret key:       ********
# Default output [table | json]: table

cloudnx whoami
# Account: 100000003 (Acme Inc.)
# Identity: developer (IAM user)

Global flags

Commands

Identity

cloudnx whoami
cloudnx configure
cloudnx iam user ls
cloudnx iam user create developer \
  --display-name "Backend Developer" \
  --console-password 'ChangeMe9$'
cloudnx iam user set-password developer "NewPass99!"   # "" to disable console
cloudnx iam user rm developer

Access keys + policies + groups

cloudnx iam key create developer       # secret shown ONCE
cloudnx iam key ls developer
cloudnx iam key rm developer <key_id>

cloudnx iam policy ls
cloudnx iam policy attach developer <policy-id>
cloudnx iam policy detach developer <policy-id>

cloudnx iam group create devs "Developer team"
cloudnx iam group add-user devs developer
cloudnx iam group remove-user devs developer
cloudnx iam group rm devs

Compute

cloudnx instance ls
cloudnx instance show <id>
cloudnx instance create \
  --name web-01 \
  --image ubuntu-22.04 \
  --plan small \
  --ssh-key my-laptop
cloudnx instance start  <id>
cloudnx instance stop   <id>
cloudnx instance reboot <id>
cloudnx instance rm     <id>

Storage

cloudnx bucket ls
cloudnx bucket create my-bucket
cloudnx bucket rm my-bucket

cloudnx s3 ls s3://my-bucket
cloudnx s3 cp ./local.tgz s3://my-bucket/backups/local.tgz
cloudnx s3 cp s3://my-bucket/report.pdf ./report.pdf
cloudnx s3 rm s3://my-bucket/old-file.txt

Billing

cloudnx billing show
# METRIC                  | VALUE
# Wallet balance          | ₹1,234.56
# Month-to-date spend     | ₹312.40
# Daily run rate          | ₹52.10
# Projected month-end     | ₹1,820.00
# Runway at current rate  | 23.7 days

Recipes

Provision and SSH

ID=$(cloudnx instance create --name api-01 --image ubuntu-22.04 --plan small --ssh-key my-laptop --output json | jq -r '.id')
HOST=$(cloudnx instance show $ID --output json | jq -r '.public_hostname')
PORT=$(cloudnx instance show $ID --output json | jq -r '.ssh_port')
ssh -p $PORT root@$HOST

CI cost guardrail

projected=$(cloudnx billing show --output json | jq '.projected_month_paise')
limit_paise=$((50000 * 100))   # ₹50,000 budget
if [ "$projected" -gt "$limit_paise" ]; then
  echo "Projected spend exceeds budget — failing build" >&2
  exit 1
fi

Authentication internals

The CLI uses AWS SigV4-compatible signing — the secret never leaves your laptop, only an HMAC of the canonical request travels over the wire.

1. First call in a process: signed POST /auth/iam/exchange-credentials returns a 15-minute access token.
2. Token cached in-process; subsequent calls reuse it until <60s remain.
3. On expiry, the next call transparently re-exchanges.

Troubleshooting

Set CLOUDNX_DEBUG=1 to print the underlying HTTP exchange (headers + body) when filing a bug as a support ticket.

For language-specific SDKs (in progress), see SDKs.