github.com/siderolabs/omni

Welcome to the v1.2.0-beta.1 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Cluster Locking

Cluster locking is a feature that pauses/disables all cluster related operations on a cluster.

Visual Feedback on Copy

Added visual feedback when copying text to the clipboard.

Generate Join Config for a Specific Join Token

Added the ability to generate a join configuration for a specific join token.

kubeconfig with grant-type=authcode-keyboard

New configs generated with the latest Omni version and authcode-keyboard enabled now work for oidc-login v1.33+. See https://github.com/int128/kubelogin/pull/1263

Newly generated configs won't work for oidc-login below v1.33. You can:

• keep using the old configs.
• generate the new configs and drop oidc-redirect-url param.
• update the oidc-login module.

Redesigned Machine List Page

The Machines list page has been redesigned to provide a better user experience.

OIDC Authentication Support

Added support for OIDC authentication in Omni.

Toast Messages

Replaced the notification banner feature with toast messages.

User Consent Form for Userpilot

Added a user consent form for Userpilot to allow opting in/out for data collection.

Userpilot Reporting Integration

Integrated Userpilot reporting to help track user interactions.

Contributors

• Edward Sammut Alessi
• Oguz Kilcan
• Andrey Smirnov
• Artem Chernyshev
• Utku Ozdemir
• Mateusz Urbanek
• Noel Georgi
• Orzelius

Changes

<details><summary>62 commits</summary> <p>

• 5beb24f fix: fix the order in the grpc interceptor chain
• ecb9e7d fix: add oidc-redirect-url arg to the generated kubeconfigs
• 958d1ee fix: inline the css from clusters-grid
• 7856de3 fix: use correct indentation in the generate-certs scripts
• d01738e test: introduce msw to mock api calls
• b801f68 test: query string for saml login is forwarded
• 120d9b2 chore: colocate tests with their tested components
• dbe39ea feat: check on start up if the account has Talos < 1.6 and strict tokens
• 99f1506 fix: keep query parameters encoded in the oidc/saml login flows
• a1cd472 chore: use storage composables from vueuse
• 4c03a10 chore: replace hardcoded colors with vars
• 95f1f87 chore: improve e2e selectors
• db939c6 release(1.2.0-beta.0): prepare release
• 1f098cf test: improve test cluster creation for e2e tests
• a035908 test: write more comprehensive e2e tests for home page
• 21cd391 chore: rekres and fix e2e test runs
• 900e5e9 chore: strip comments from generated ClusterMachineConfig
• 5ab4fe4 chore: migrate omni e2e tests to javascript
• ca93da3 fix: fix switch user button for Auth0
• fbf89ac test: fix cluster-import e2e test
• 58217d6 feat: implement user consent form for the UserPilot
• 1b4de5b feat: abort ongoing cluster import process
• 3908993 fix: use correct order to determine SideroV1 keys directory path
• 9b5e552 chore: rekres and bump deps
• 1ca61f2 fix: alignment on home no access
• 2d30614 chore(ci): rekres to use action runner groups
• c505479 fix: active link style for nodes and machines
• 5298efb chore(ci): rekres to use action runner groups
• 8cd15f0 chore: lazy load routes, modals, and code editor
• 977c316 chore: ignore html whitespace
• 4e63cc8 fix: create join token modal margin
• c87b45b fix: home general info error & loading
• 672e410 feat: support generating join configs with searching join tokens by name
• f675205 chore: update vite to 7.1.5
• cc231e5 chore: remove /omni root route
• 906df9a chore: remove the usage of --input-dir flag in tests
• 7e1ec6b feat: add visual feedback when copying
• 7a6ba5f chore: replace deprecated libraries with vueuse
• b70560c feat: implement OIDC auth support
• 5529607 chore: rekres providing lint-fmt and fixing frontend
• 7b1f426 feat: redesign machines page
• 43ec5b0 fix: do not make not running lazy workload proxy healthchecker block
• 122903f chore: rekres to bring in lint-eslint-fmt
• b867332 fix: sidebar showing when it should not
• cc03488 feat: implement cluster locking
• e9aba45 fix: sidebar styles missing on mobile
• 0603af9 chore: refactor routes to remove withPrefix
• bbeebd7 feat: implement toast messages
• 6e6c30c fix: alignment on error pages
• a6ed371 fix: route size on login and machine classes
• e215b37 fix: route resizing issue
• faf5432 refactor: use new qruntime with mapping of destroyed resources
• ef3eac7 fix: respect app.vue padding in routes
• ffd9859 fix: console warning about invalid watch value
• b5c6825 fix: fix the log spam caused by the expensive reqs to embedded etcd
• bce3ba2 chore: improve tbutton typings
• de144e3 feat: support Userpilot reports
• 9f0f15a fix: copy buttons on omni home page
• c76b003 refactor: make cluster/machineset destroy status controllers QController
• a40500e test: use clustermachineconfig sha for omni upgrade e2e test
• 6f98fca fix: make useWatch respect reactivity
• 825e669 chore: use vue specific rules for dot-notation and eqeqeq </p> </details>

Changes since v1.2.0-beta.0

<details><summary>12 commits</summary> <p>

• 5beb24f fix: fix the order in the grpc interceptor chain
• ecb9e7d fix: add oidc-redirect-url arg to the generated kubeconfigs
• 958d1ee fix: inline the css from clusters-grid
• 7856de3 fix: use correct indentation in the generate-certs scripts
• d01738e test: introduce msw to mock api calls
• b801f68 test: query string for saml login is forwarded
• 120d9b2 chore: colocate tests with their tested components
• dbe39ea feat: check on start up if the account has Talos < 1.6 and strict tokens
• 99f1506 fix: keep query parameters encoded in the oidc/saml login flows
• a1cd472 chore: use storage composables from vueuse
• 4c03a10 chore: replace hardcoded colors with vars
• 95f1f87 chore: improve e2e selectors </p> </details>

Changes from siderolabs/go-api-signature

<details><summary>1 commit</summary> <p>

• 68478e2 fix: return invalid signature error when a signature is required </p> </details>

Changes from siderolabs/go-kubernetes

<details><summary>1 commit</summary> <p>

• 40e5536 feat: update checks for Kubernetes 1.34 </p> </details>

Changes from siderolabs/image-factory

<details><summary>7 commits</summary> <p>

• a3a7661 release(v0.8.4): prepare release
• 075aa3f fix: update Talos to 1.11.1
• 02723cd fix: translation ID
• 94c6df1 release(v0.8.3): prepare release
• 7254abf fix: disable redirects to PXE
• 251aee0 release(v0.8.2): prepare release
• 418eebb fix: don't filter out rc versions </p> </details>

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.38.0 -> v1.39.0
• github.com/aws/aws-sdk-go-v2/config v1.29.17 -> v1.31.8
• github.com/aws/aws-sdk-go-v2/credentials v1.17.70 -> v1.18.12
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.49 -> v1.19.6
• github.com/aws/aws-sdk-go-v2/service/s3 v1.72.3 -> v1.88.1
• github.com/aws/smithy-go v1.22.5 -> v1.23.0
• github.com/containers/image/v5 v5.36.1 -> v5.36.2
• github.com/coreos/go-oidc/v3 v3.15.0 new
• github.com/cosi-project/runtime v1.10.7 -> v1.11.0
• github.com/emicklei/dot v1.9.0 -> v1.9.1
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1 -> v2.27.2
• github.com/hashicorp/vault/api v1.20.0 -> v1.21.0
• github.com/johannesboyne/gofakes3 ed9094be7668 -> 6555d310c473
• github.com/prometheus/client_golang v1.23.0 -> v1.23.2
• github.com/prometheus/common v0.65.0 -> v0.66.1
• github.com/siderolabs/go-api-signature v0.3.7 -> v0.3.8
• github.com/siderolabs/go-kubernetes v0.2.25 -> v0.2.26
• github.com/siderolabs/image-factory v0.8.1 -> v0.8.4
• github.com/siderolabs/omni/client v1.0.1 -> v1.1.2
• github.com/siderolabs/talos/pkg/machinery v1.11.0-rc.0 -> v1.11.1
• github.com/spf13/cobra v1.9.1 -> v1.10.1
• github.com/stretchr/testify v1.10.0 -> v1.11.1
• go.etcd.io/bbolt v1.4.2 -> v1.4.3
• golang.org/x/crypto v0.41.0 -> v0.42.0
• golang.org/x/net v0.43.0 -> v0.44.0
• golang.org/x/oauth2 v0.31.0 new
• golang.org/x/sync v0.16.0 -> v0.17.0
• golang.org/x/text v0.28.0 -> v0.29.0
• golang.org/x/time v0.12.0 -> v0.13.0
• golang.org/x/tools v0.36.0 -> v0.37.0
• google.golang.org/grpc v1.74.2 -> v1.75.1
• google.golang.org/protobuf v1.36.7 -> v1.36.9
• sigs.k8s.io/controller-runtime v0.21.0 -> v0.22.1

Previous release can be found at v1.1.0

Welcome to the 1.2.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Cluster Locking

Cluster locking is a feature that pauses/disables all cluster related operations on a cluster.

Visual Feedback on Copy

Added visual feedback when copying text to the clipboard.

Generate Join Config for a Specific Join Token

Added the ability to generate a join configuration for a specific join token.

Redesigned Machine List Page

The Machines list page has been redesigned to provide a better user experience.

OIDC Authentication Support

Added support for OIDC authentication in Omni.

Toast Messages

Replaced the notification banner feature with toast messages.

User Consent Form for Userpilot

Added a user consent form for Userpilot to allow opting in/out for data collection.

Userpilot Reporting Integration

Integrated Userpilot reporting to help track user interactions.

Contributors

• Edward Sammut Alessi
• Andrey Smirnov
• Oguz Kilcan
• Artem Chernyshev
• Mateusz Urbanek
• Noel Georgi
• Orzelius
• Utku Ozdemir

Changes

<details><summary>49 commits</summary> <p>

• 1f098cfa test: improve test cluster creation for e2e tests
• a035908a test: write more comprehensive e2e tests for home page
• 21cd3915 chore: rekres and fix e2e test runs
• 900e5e95 chore: strip comments from generated ClusterMachineConfig
• 5ab4fe41 chore: migrate omni e2e tests to javascript
• ca93da3e fix: fix switch user button for Auth0
• fbf89ac5 test: fix cluster-import e2e test
• 58217d6f feat: implement user consent form for the UserPilot
• 1b4de5b7 feat: abort ongoing cluster import process
• 39089938 fix: use correct order to determine SideroV1 keys directory path
• 9b5e5523 chore: rekres and bump deps
• 1ca61f2a fix: alignment on home no access
• 2d30614c chore(ci): rekres to use action runner groups
• c5054794 fix: active link style for nodes and machines
• 5298efbe chore(ci): rekres to use action runner groups
• 8cd15f01 chore: lazy load routes, modals, and code editor
• 977c316d chore: ignore html whitespace
• 4e63cc80 fix: create join token modal margin
• c87b45b6 fix: home general info error & loading
• 672e410d feat: support generating join configs with searching join tokens by name
• f675205b chore: update vite to 7.1.5
• cc231e5e chore: remove /omni root route
• 906df9a6 chore: remove the usage of --input-dir flag in tests
• 7e1ec6b1 feat: add visual feedback when copying
• 7a6ba5f9 chore: replace deprecated libraries with vueuse
• b70560c1 feat: implement OIDC auth support
• 55296073 chore: rekres providing lint-fmt and fixing frontend
• 7b1f4260 feat: redesign machines page
• 43ec5b04 fix: do not make not running lazy workload proxy healthchecker block
• 122903f2 chore: rekres to bring in lint-eslint-fmt
• b867332e fix: sidebar showing when it should not
• cc03488a feat: implement cluster locking
• e9aba459 fix: sidebar styles missing on mobile
• 0603af9e chore: refactor routes to remove withPrefix
• bbeebd7e feat: implement toast messages
• 6e6c30cd fix: alignment on error pages
• a6ed371a fix: route size on login and machine classes
• e215b37c fix: route resizing issue
• faf54325 refactor: use new qruntime with mapping of destroyed resources
• ef3eac7c fix: respect app.vue padding in routes
• ffd98593 fix: console warning about invalid watch value
• b5c68259 fix: fix the log spam caused by the expensive reqs to embedded etcd
• bce3ba27 chore: improve tbutton typings
• de144e3f feat: support Userpilot reports
• 9f0f15aa fix: copy buttons on omni home page
• c76b003b refactor: make cluster/machineset destroy status controllers QController
• a40500e6 test: use clustermachineconfig sha for omni upgrade e2e test
• 6f98fca0 fix: make useWatch respect reactivity
• 825e669c chore: use vue specific rules for dot-notation and eqeqeq </p> </details>

Changes from siderolabs/go-kubernetes

<details><summary>1 commit</summary> <p>

• 40e5536 feat: update checks for Kubernetes 1.34 </p> </details>

Changes from siderolabs/image-factory

<details><summary>7 commits</summary> <p>

• a3a7661 release(v0.8.4): prepare release
• 075aa3f fix: update Talos to 1.11.1
• 02723cd fix: translation ID
• 94c6df1 release(v0.8.3): prepare release
• 7254abf fix: disable redirects to PXE
• 251aee0 release(v0.8.2): prepare release
• 418eebb fix: don't filter out rc versions </p> </details>

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.38.0 -> v1.39.0
• github.com/aws/aws-sdk-go-v2/config v1.29.17 -> v1.31.8
• github.com/aws/aws-sdk-go-v2/credentials v1.17.70 -> v1.18.12
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.49 -> v1.19.6
• github.com/aws/aws-sdk-go-v2/service/s3 v1.72.3 -> v1.88.1
• github.com/aws/smithy-go v1.22.5 -> v1.23.0
• github.com/containers/image/v5 v5.36.1 -> v5.36.2
• github.com/coreos/go-oidc/v3 v3.15.0 new
• github.com/cosi-project/runtime v1.10.7 -> v1.11.0
• github.com/emicklei/dot v1.9.0 -> v1.9.1
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1 -> v2.27.2
• github.com/hashicorp/vault/api v1.20.0 -> v1.21.0
• github.com/johannesboyne/gofakes3 ed9094be7668 -> 6555d310c473
• github.com/prometheus/client_golang v1.23.0 -> v1.23.2
• github.com/prometheus/common v0.65.0 -> v0.66.1
• github.com/siderolabs/go-kubernetes v0.2.25 -> v0.2.26
• github.com/siderolabs/image-factory v0.8.1 -> v0.8.4
• github.com/siderolabs/omni/client v1.0.1 -> v1.1.2
• github.com/siderolabs/talos/pkg/machinery v1.11.0-rc.0 -> v1.11.1
• github.com/spf13/cobra v1.9.1 -> v1.10.1
• github.com/stretchr/testify v1.10.0 -> v1.11.1
• go.etcd.io/bbolt v1.4.2 -> v1.4.3
• golang.org/x/crypto v0.41.0 -> v0.42.0
• golang.org/x/net v0.43.0 -> v0.44.0
• golang.org/x/oauth2 v0.31.0 new
• golang.org/x/sync v0.16.0 -> v0.17.0
• golang.org/x/text v0.28.0 -> v0.29.0
• golang.org/x/time v0.12.0 -> v0.13.0
• golang.org/x/tools v0.36.0 -> v0.37.0
• google.golang.org/grpc v1.74.2 -> v1.75.1
• google.golang.org/protobuf v1.36.7 -> v1.36.9
• sigs.k8s.io/controller-runtime v0.21.0 -> v0.22.1

Previous release can be found at v1.1.0

Welcome to the v1.1.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Improved Clusters Page Breadcrumbs

Breadcrumbs on the clusters page have been redesigned for better navigation.

CLI Support for Kernel Args and Join Configs

omnictl now supports commands to retrieve SideroLink kernel arguments and join configurations.

Default Config Location Change

The default location for storing Omni configuration files and user PGP keys has been changed.

Custom Volumes in Helm Chart

Added support for specifying custom volumes and volume mounts in the Omni Helm chart.

Join Token Usage Warning

Omni now warns users when a join token is currently in use during revoke or delete operations.

Collapsible Sidebar on Mobile

The sidebar can now be collapsed when viewed on mobile devices, improving usability on smaller screens.

Join Tokens CLI

A new CLI feature has been added to manage SideroLink join tokens directly using omnictl.

Unique Token Status per Node

Omni now computes and displays a unique join token status for each node.

Contributors

• Andrey Smirnov
• Edward Sammut Alessi
• Oguz Kilcan
• Mateusz Urbanek
• Artem Chernyshev
• Noel Georgi
• Thomas Gosteli
• Utku Ozdemir

Changes

<details><summary>35 commits</summary> <p>

• 9daa2fa2 chore: create a useWatch composable
• 7ae7ea74 chore: rekres, bump deps, Go, satisfy linters
• 152db8fe feat: change default location for storing Omni config and user PGP keys
• 36430a26 feat: add custom volume and custom volume mount support for omni helm chart
• 150d61bf fix: better detect user identity in SAML responses
• 80a572fa chore: normalise font styles
• 82eba18b chore: update frontend dependencies
• 12a1d4d5 feat: make sidebar collapsible on mobile
• e108fb1c feat: support commands for getting kernel args and join configs in CLI
• 45a9d8c2 chore: types for route.meta.sidebar & title
• 110d551c chore: tailwind v4 upgrade
• 13d83648 chore: prepare omni for talos v1.11.0-beta.2
• 270eabf1 chore: commit vscode settings for frontend
• f264f1d1 fix: incorrect disabled icon color
• a268b8fd test: fix asserting etcd members test
• 69c4fd5d fix: prevent service account creation if name is already in use
• fe5d0280 feat: warn user about join token being in use during revoke/delete
• 73e42222 chore: more lint & formatting rules for omni/frontend
• 7e032266 chore: ts, lint, and formatting rules for omni frontend
• 928b7d89 test: fix omni upgrade e2e test
• 8e4f86f9 feat: rework breadcrumbs for clusters page
• 9521b302 chore: switch from bun to node
• 229e0060 fix: keep control plane status up to date
• 3f35ef23 chore: remove unused .eslintrc.yaml config
• 025c37f2 fix: stop enforcing talos version check on machine allocation
• c3b4f021 chore: rekres, bump talos and k8s versions
• 7e59f1ce fix: install frontend dependencies from lockfile
• 746c9662 chore: rekres to use correct slack channel for slack-notify
• 5047a625 feat: compute unique token status for each node
• e740c8b7 test: fix registry mirror config format in integration tests
• 0591d2ee feat: implement join token management CLI
• 4b0c32aa fix: remove MachineLabels when a Link is removed
• 9ac5cf4f fix: properly handle empty configs in omnictl config merge CLI command
• 0fc13bbf test: run Omni upgrade tests against latest stable
• 88f51163 chore: run inspector in the dev docker-compose </p> </details>

Changes from siderolabs/discovery-client

<details><summary>3 commits</summary> <p>

• 0bffa6f fix: allow TLS config to be passed as a function
• 09c6687 chore: fix project name in release.toml
• 71b0c6d fix: add FIPS-140-3 strict compliance </p> </details>

Changes from siderolabs/discovery-service

<details><summary>2 commits</summary> <p>

• d186f97 release(v1.10.11): prepare release
• 01e232a fix: pull in new client for FIPS-140-3 compliance </p> </details>

Changes from siderolabs/gen

<details><summary>1 commit</summary> <p>

• 044d921 feat: add xslices.Deduplicate </p> </details>

Changes from siderolabs/go-api-signature

<details><summary>2 commits</summary> <p>

• d22e33d feat: clarify fallback logic for fallback capable key provider
• dea3048 feat: allow configuring the provider with fallback location </p> </details>

Changes from siderolabs/go-debug

<details><summary>1 commit</summary> <p>

• e21721b chore: add support for Go 1.25 </p> </details>

Changes from siderolabs/go-kubernetes

<details><summary>2 commits</summary> <p>

• 7887034 feat: add checks for Kubernetes 1.34 removals
• 657a74b feat: prepare for Kubernetes 1.34 </p> </details>

Changes from siderolabs/image-factory

<details><summary>33 commits</summary> <p>

• 57ad419 release(v0.8.1): prepare release
• 6392086 fix: prevent failure on cache.Get
• a1e3707 feat: add fallback if S3 is missbehaving
• 9760ab0 release(v0.8.0): prepare release
• 7c6d261 fix: set content-disposition on S3
• f3e97df docs(image-factory): add info about S3 cache and CDN
• d25e7ac fix: add extra context to logs from s3 cache
• a3a0dff fix: add optional region to S3 client
• a9e2d08 feat: add support for Object Storage and CDN cache
• b8bfc19 docs: add air-gapped documentation
• f8b4ef0 docs: add new translation
• 0c83228 release(v0.7.6): prepare release
• 6f409ec fix: drop extractParams function
• 19ac9c2 release(v0.7.5): prepare release
• 3b2b97a fix: support iPXE aliases for architectures
• b838a44 feat: update to Talos 1.11.0-beta.0
• 953e217 docs: document source images used
• e1e80fd feat: serve talosctl from image factory
• 3e35f91 feat(secureboot): implement reading key material from AWS KMS
• f2bb870 release(v0.7.4): prepare release
• c035602 fix: hide kernel args warning for Talos >= 1.10
• a68433c test: capture test coverage for integration tests
• 28d9a30 fix: improve HTTP access log
• 1df0e9e release(v0.7.3): prepare release
• 50f8148 fix: default options on startup
• 29b022e release(v0.7.2): prepare release
• d9ebc5a fix: refresh remote pullers and pushers on interval
• f09f134 release(v0.7.1): prepare release
• 68d6660 fix: pull in overrides from the overlay profile
• 7dd34b7 fix: vmware ova generation
• 251c75e fix(ci): image factory cron
• ed0722d fix: specify each language natively
• a8b9073 chore: bump Talos version to proper in tests </p> </details>

Dependency Changes

• github.com/ProtonMail/gopenpgp/v2 v2.8.3 -> v2.9.0
• github.com/aws/aws-sdk-go-v2 v1.36.3 -> v1.38.0
• github.com/aws/aws-sdk-go-v2/config v1.29.14 -> v1.29.17
• github.com/aws/aws-sdk-go-v2/credentials v1.17.67 -> v1.17.70
• github.com/aws/smithy-go v1.22.3 -> v1.22.5
• github.com/cenkalti/backoff/v5 v5.0.2 -> v5.0.3
• github.com/containers/image/v5 v5.35.0 -> v5.36.1
• github.com/cosi-project/runtime v0.10.6 -> v1.10.7
• github.com/emicklei/dot v1.8.0 -> v1.9.0
• github.com/go-jose/go-jose/v4 v4.1.0 -> v4.1.2
• github.com/go-logr/logr v1.4.2 -> v1.4.3
• github.com/go-playground/validator/v10 v10.26.0 -> v10.27.0
• github.com/google/go-containerregistry v0.20.3 -> v0.20.6
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 -> v2.27.1
• github.com/hashicorp/vault/api v1.16.0 -> v1.20.0
• github.com/hashicorp/vault/api/auth/kubernetes v0.9.0 -> v0.10.0
• github.com/johannesboyne/gofakes3 5c39aecd6999 -> ed9094be7668
• github.com/prometheus/client_golang v1.22.0 -> v1.23.0
• github.com/prometheus/common v0.63.0 -> v0.65.0
• github.com/santhosh-tekuri/jsonschema/v6 v6.0.1 -> v6.0.2
• github.com/siderolabs/discovery-client v0.1.11 -> v0.1.13
• github.com/siderolabs/discovery-service v1.0.10 -> v1.0.11
• github.com/siderolabs/gen v0.8.4 -> v0.8.5
• github.com/siderolabs/go-api-signature v0.3.6 -> v0.3.7
• github.com/siderolabs/go-debug v0.5.0 -> v0.6.0
• github.com/siderolabs/go-kubernetes v0.2.23 -> v0.2.25
• github.com/siderolabs/image-factory v0.7.0 -> v0.8.1
• github.com/siderolabs/omni/client v0.49.0 -> v1.0.1
• github.com/siderolabs/talos/pkg/machinery da5a4449f1a9 -> v1.11.0-rc.0
• github.com/zitadel/oidc/v3 v3.38.1 -> v3.44.0
• go.etcd.io/bbolt v1.4.0 -> v1.4.2
• go.etcd.io/etcd/client/pkg/v3 v3.5.21 -> v3.6.4
• go.etcd.io/etcd/client/v3 v3.5.21 -> v3.6.4
• go.etcd.io/etcd/server/v3 v3.5.21 -> v3.6.4
• go.uber.org/mock v0.5.0 -> v0.6.0
• golang.org/x/crypto v0.39.0 -> v0.41.0
• golang.org/x/net v0.41.0 -> v0.43.0
• golang.org/x/sync v0.15.0 -> v0.16.0
• golang.org/x/text v0.26.0 -> v0.28.0
• golang.org/x/time v0.11.0 -> v0.12.0
• golang.org/x/tools v0.33.0 -> v0.36.0
• golang.zx2c4.com/wireguard 436f7fdc1670 -> f333402bd9cb
• google.golang.org/grpc v1.73.0 -> v1.74.2
• google.golang.org/protobuf v1.36.6 -> v1.36.7
• k8s.io/api v0.34.0-alpha.0 -> v0.35.0-alpha.0
• k8s.io/apimachinery v0.34.0-alpha.0 -> v0.35.0-alpha.0
• k8s.io/client-go v0.34.0-alpha.0 -> v0.35.0-alpha.0
• sigs.k8s.io/controller-runtime v0.20.4 -> v0.21.0

Previous release can be found at v1.0.0

Welcome to the v1.0.0-beta.1 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Multiple Join Token Support

Omni now supports multiple SideroLink join tokens. It now creates the default non-expiring token, then the user can create more tokens and delete the old ones.

Config Change History

There is now MachineConfigDiffs.omni.sidero.dev resource that keeps the history of each machine config changes. It keeps up to 1000 diffs for the last 30 days.

Contributors

• Artem Chernyshev
• Andrey Smirnov
• Utku Ozdemir
• Oguz Kilcan
• Mateusz Urbanek

Changes

<details><summary>19 commits</summary> <p>

• 28158ed8 fix: ignore MachineStatus having no TalosVersion in DNS service
• da3f28f6 chore: support encoding extra docs in siderolink.RenderJoinConfig
• f4582116 fix: allow encoding join tokens using v1 version
• 80ff037a fix: do not try to encode v1/v2 tokens in siderolink.NewJoinToken
• 7b7c021d fix: do not create JoinTokenUsage for PendingMachines
• 2c4f34a7 fix: fix etcd status check in control plane status
• b0f76343 feat: implement the API for reading resources and their dependency graph
• e945cc7b release(v1.0.0-beta.0): prepare release
• a2722856 chore: enable gRPC keepalive in the Omni client
• f8de9a6d feat: add support for imported cluster secrets
• 753259c2 fix: do not filter out noop events in the infra provider state
• ab1f7cc7 feat: implement multiple token support and token management
• 0e76483b chore: rekres, bump deps, Go, Talos and k8s versions, satisfy linters
• e1c1aaea fix: add validation of k8s version
• f1b47f08 feat: log and store redacted machine config diffs
• a7ac6372 chore: rewrite join config generation
• 66c7897b chore: update zstd module go.mod deps
• 3b701483 test: reduce the log verbosity in unit tests
• ff32ae4c fix: gracefully handle logServer shutdown </p> </details>

Changes since v1.0.0-beta.0

<details><summary>7 commits</summary> <p>

• 28158ed8 fix: ignore MachineStatus having no TalosVersion in DNS service
• da3f28f6 chore: support encoding extra docs in siderolink.RenderJoinConfig
• f4582116 fix: allow encoding join tokens using v1 version
• 80ff037a fix: do not try to encode v1/v2 tokens in siderolink.NewJoinToken
• 7b7c021d fix: do not create JoinTokenUsage for PendingMachines
• 2c4f34a7 fix: fix etcd status check in control plane status
• b0f76343 feat: implement the API for reading resources and their dependency graph </p> </details>

Changes from siderolabs/crypto

<details><summary>5 commits</summary> <p>

• 62a079b fix: update TLS config, add tests for TLS interactions
• c2b4e26 fix: remove code duplication and fix Ed255119 CA generation
• 2a07632 fix: enforce FIPS-140-3 compliance
• 17107ae fix: add generic CSR generator and OpenSSL interop
• 53659fc refactor: split into files </p> </details>

Dependency Changes

• github.com/cosi-project/runtime v0.10.5 -> v0.10.6
• github.com/siderolabs/crypto v0.5.1 -> v0.6.3
• github.com/siderolabs/talos/pkg/machinery v1.10.1 -> da5a4449f1a9
• google.golang.org/grpc v1.72.0 -> v1.73.0

Previous release can be found at v0.52.0

Welcome to the v1.0.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Multiple Join Token Support

Omni now supports multiple SideroLink join tokens. It now creates the default non-expiring token, then the user can create more tokens and delete the old ones.

Config Change History

There is now MachineConfigDiffs.omni.sidero.dev resource that keeps the history of each machine config changes. It keeps up to 1000 diffs for the last 30 days.

Contributors

• Andrey Smirnov
• Artem Chernyshev
• Utku Ozdemir
• Oguz Kilcan
• Mateusz Urbanek

Changes

<details><summary>11 commits</summary> <p>

• a2722856 chore: enable gRPC keepalive in the Omni client
• f8de9a6d feat: add support for imported cluster secrets
• 753259c2 fix: do not filter out noop events in the infra provider state
• ab1f7cc7 feat: implement multiple token support and token management
• 0e76483b chore: rekres, bump deps, Go, Talos and k8s versions, satisfy linters
• e1c1aaea fix: add validation of k8s version
• f1b47f08 feat: log and store redacted machine config diffs
• a7ac6372 chore: rewrite join config generation
• 66c7897b chore: update zstd module go.mod deps
• 3b701483 test: reduce the log verbosity in unit tests
• ff32ae4c fix: gracefully handle logServer shutdown </p> </details>

Changes from siderolabs/crypto

<details><summary>5 commits</summary> <p>

• 62a079b fix: update TLS config, add tests for TLS interactions
• c2b4e26 fix: remove code duplication and fix Ed255119 CA generation
• 2a07632 fix: enforce FIPS-140-3 compliance
• 17107ae fix: add generic CSR generator and OpenSSL interop
• 53659fc refactor: split into files </p> </details>

Dependency Changes

• github.com/cosi-project/runtime v0.10.5 -> v0.10.6
• github.com/siderolabs/crypto v0.5.1 -> v0.6.3
• github.com/siderolabs/talos/pkg/machinery v1.10.1 -> da5a4449f1a9
• google.golang.org/grpc v1.72.0 -> v1.73.0

Previous release can be found at v0.52.0

Welcome to the v0.52.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Support Fusion Auth

Fusion Auth provider is now supported via SAML. Additional parameter --auth-saml-name-id-format must be set to urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress.

Infra Providers Request ID

Infra providers can now be configured to encode MachineRequest ID into the join token. With that enabled setting the machine UUID in the MachineRequestStatus is no longer required in the provider: Omni will automatically map the MachineRequest ID to the node UUID and will populate the field in the status.

This change is useful in the infra providers where it's impossible to get the created machine UUID.

Allow talosctl wipe disk Command

talosctl wipe disk can now be used with Omni managed nodes. Omni will impersonate os:admin role for it if the user has write access to the cluster.

Contributors

• Artem Chernyshev
• Utku Ozdemir
• Orzelius

Changes

<details><summary>14 commits</summary> <p>

• e1d47496 feat: allow talosctl wipe disk command
• 877b3791 fix: update SAML library to the forked version with the ACS parser fix
• b1225c93 feat: support setting custom name ID format in SAML metadata
• c60820f0 fix: correctly detect installation status for bare-metal machines
• 344d0618 feat: allow encoding the machine request ID into the join tokens
• a7fe525c test: test updating from old Omni version to the current
• abfe93c0 docs: add guide for development on darwin
• 0ad0a67b test: save a support bundle when a test suite has failed
• 9e4f8198 fix: make sure clipped req/resp content logs are still valid JSONs
• 1c307300 feat: show the actual node name in the node overview breadcrumbs
• c097b5f1 fix: do not try running debug server in the prod builds
• 8a93c2d5 refactor: bring back the reverted new workload proxy dialing logic
• 122b7960 test: run Omni as part of integration tests </p> </details>

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.51.0

Welcome to the v0.51.0-beta.2 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Omni can now be configured using YAML configuration file in addition to the command line flags. The parameter --config-file can be used for that. Any command line flags have higher priority.

Contributors

• Artem Chernyshev

Changes

<details><summary>2 commits</summary> <p>

• 493d00ca fix: properly support --config-path argument
• 742faec7 fix: do not mark SAML and Auth0 config sections as mutually exclusive </p> </details>

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.51.0-beta.1