Configuration

Initial setup

grn configure

This will prompt for:

GRN Client ID [None]: <your-client-id>
GRN Client Secret [None]: <your-client-secret>
Default region name [HCM-3]:
Default output format [json]:
Project ID (leave blank to auto-detect) [None]:
Fetching project_id from HCM-3...
Auto-detected project_id: pro-xxxxxxxx

Project ID is the VNG Cloud project UUID for the selected region (e.g. pro-e28d4501-...). Leave blank and the wizard calls the vServer API with your credentials to detect and save it. Each user has one project per region, so the detection is unambiguous.

If auto-detect fails (network or auth error), the wizard prints a warning and leaves the field blank — downstream tools (such as the GreenNode MCP Server) can still auto-detect at first call.

Credentials are obtained from the VNG Cloud IAM Portal under Service Accounts.

Credential resolution order

Credentials are resolved in the following order (highest to lowest priority):

Environment variables: GRN_ACCESS_KEY_ID, GRN_SECRET_ACCESS_KEY
Shared credentials file: ~/.greenode/credentials

Environment variables

Variable	Description
`GRN_ACCESS_KEY_ID`	Client ID (overrides credentials file)
`GRN_SECRET_ACCESS_KEY`	Client Secret (overrides credentials file)
`GRN_DEFAULT_REGION`	Default region
`GRN_DEFAULT_PROJECT_ID`	Project ID (VNG Cloud project UUID)
`GRN_PROFILE`	Profile name (default: "default")
`GRN_DEFAULT_OUTPUT`	Output format

Environment variables take priority over config file values.

Example

# Set credentials via environment variables
export GRN_ACCESS_KEY_ID=your-client-id
export GRN_SECRET_ACCESS_KEY=your-client-secret
export GRN_DEFAULT_REGION=HCM-3

# Commands will use env var credentials automatically
grn vks list-clusters

Config files

Credentials and config are stored in separate files:

# ~/.greenode/credentials
[default]
client_id = 5028b2cb-cb0f-4249-ae1e-1c51b2bcf6e6
client_secret = abc123

[staging]
client_id = xxx
client_secret = yyy

# ~/.greenode/config
[default]
region = HCM-3
output = json
project_id = pro-xxxxxxxx

[profile staging]
region = HAN
output = table
project_id = pro-yyyyyyyy

Credentials file is created with 0600 permissions (owner read/write only).

Configuration commands

grn configure              # Interactive setup
grn configure list         # Show all config values and sources
grn configure get region   # Get a specific value
grn configure set region HAN  # Set a specific value

`grn configure list` output

          Name                   Value            Type    Location
          ----                   -----            ----    --------
       profile               <not set>            None    None
     client_id    ****************bc6e     config-file    ~/.greenode/credentials
 client_secret    ****************c123     config-file    ~/.greenode/credentials
        region                   HCM-3     config-file    ~/.greenode/config
        output                    json     config-file    ~/.greenode/config
    project_id       pro-xxxxxxxx          config-file    ~/.greenode/config

Profiles

# Configure a named profile
grn configure --profile staging

# Use a named profile
grn --profile staging vks list-clusters

# Or via environment variable
export GRN_PROFILE=staging
grn vks list-clusters

Available regions

Region	VKS Endpoint
`HCM-3`	`https://vks.api.vngcloud.vn`
`HAN`	`https://vks-han-1.api.vngcloud.vn`