github.com/siderolabs/omni

Welcome to the v0.46.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Bare Metal Infra Provider Support

Omni now supports bare metal infra provider.

This provider operates as a standalone service that can be deployed within a bare-metal datacenter network. It manages machines via IPMI, supports PXE-based booting, and enables machine resets without relying on the Talos API.

Its functionality closely resembles that of Sidero Metal.

For detailed setup instructions, refer to the documentation..

Machine Categories

The Machines page now categorizes machines based on how they were added to the account:

• Manual: Machines manually added by installing Talos with siderolink parameters.
• Provisioned: Machines created by infrastructure providers (e.g., KubeVirt).
• PXE-Booted: Machines discovered and accepted from the bare-metal infrastructure provider.
• Pending: Machines discovered but not yet accepted from the bare-metal infrastructure provider.

Contributors

• Utku Ozdemir
• Artem Chernyshev
• Andrey Smirnov
• Dmitriy Matrenichev
• Noel Georgi
• Joakim Nohlgård
• Nico Berlee

Changes

<details><summary>28 commits</summary> <p>

• 8701623 release(v0.46.0-beta.0): prepare release
• afc9dcf feat: introduce resource for infra provider health checks
• 096f14f feat: calculate not accepted machines count in the machine status ctrl
• 1495ca0 feat: implement power states as machine stage events
• 2a2c648 feat: bump default Talos version to 1.9.1, Kubernetes to 1.32.0
• 5db4c8c feat: add disk wipe warning when accepting a pending machine
• 9208587 chore: bump Go, dependencies, rekres, regenerate
• 84c01fd fix: properly reset MachineStatus hostname for deallocated machines
• d5e1f85 fix: do not allow using static infra providers in the machine classes
• d1b3dff fix: fix immutability checks in infra provider state
• 353a3c0 fix: change the look of the infra provider labels
• 7052e8b fix: enable secure boot checkbox in the UI
• 394065f feat: implement cordoning infra machines
• 728897a fix: wait for infra machine info to be collected before powering off
• 1c4f9af feat: implement infra machine reboot
• edc47a0 feat: sync infra machine labels onto the machine status
• 6f10a97 fix: fallback to machine ID correctly if its hostname is missing
• 3ba096a fix: bring in new versions of COSI runtime and state-etcd
• 82da2f4 fix: never remove etcd members which ID is discovered at least once
• 3dd7e93 fix: display nodes sidebar
• 06aa266 fix: etcd lease handlining
• 34dd2ae feat: properly handle powered off machines in the UI and machine classes
• 1d8c754 fix: do not preserve extensions on Talos agent mode
• 1f81400 fix: run destroy validations on teardown
• 6190568 fix: allow accepting rejected infra machines
• 3332684 fix: correctly handle input finalizers in InfraMachineController
• b7c3c50 feat: add support for Zitadel IdP
• e8aee8e feat: implement the machine categories UI </p> </details>

Changes from siderolabs/discovery-service

<details><summary>1 commit</summary> <p>

• 7c1129e chore: bump deps </p> </details>

Changes from siderolabs/gen

<details><summary>1 commit</summary> <p>

• 5ae3afe chore: update hashtriemap implementation from the latest upstream </p> </details>

Changes from siderolabs/go-talos-support

<details><summary>1 commit</summary> <p>

• 0f784bd fix: avoid deadlock on context cancel </p> </details>

Changes from siderolabs/image-factory

<details><summary>7 commits</summary> <p>

• a4932a2 chore: reduce memory usage
• 1729190 chore: support gcr.io keychain for registry auth
• 1389813 release(v0.6.4): prepare release
• b7c7c16 fix: secureboot pxe
• 67eb663 release(v0.6.3): prepare release
• 46f4104 feat: update to Talos 1.9.0-beta.1
• cbf8cc9 feat: add Turing RK1 as option </p> </details>

Dependency Changes

• filippo.io/age v1.2.0 -> v1.2.1
• github.com/ProtonMail/gopenpgp/v2 v2.8.1 -> v2.8.2
• github.com/aws/aws-sdk-go-v2 v1.32.6 -> v1.32.8
• github.com/aws/aws-sdk-go-v2/config v1.28.6 -> v1.28.11
• github.com/aws/aws-sdk-go-v2/credentials v1.17.47 -> v1.17.52
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.43 -> v1.17.49
• github.com/aws/aws-sdk-go-v2/service/s3 v1.71.0 -> v1.72.3
• github.com/cosi-project/runtime v0.7.5 -> v0.9.0
• github.com/cosi-project/state-etcd v0.4.1 -> v0.5.0
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.24.0 -> v2.25.1
• github.com/jonboulle/clockwork 7e524bd2b238 -> v0.5.0
• github.com/prometheus/common v0.60.1 -> v0.61.0
• github.com/siderolabs/discovery-service v1.0.8 -> v1.0.9
• github.com/siderolabs/gen v0.7.0 -> v0.8.0
• github.com/siderolabs/go-talos-support v0.1.1 -> v0.1.2
• github.com/siderolabs/image-factory v0.6.2 -> v0.6.5
• github.com/siderolabs/omni/client v0.42.1 -> v0.45.0
• github.com/siderolabs/talos/pkg/machinery v1.9.0-beta.1 -> v1.10.0-alpha.0
• github.com/zitadel/oidc/v3 v3.33.1 -> v3.34.0
• golang.org/x/crypto v0.29.0 -> v0.32.0
• golang.org/x/net v0.31.0 -> v0.34.0
• golang.org/x/tools v0.27.0 -> v0.29.0
• golang.zx2c4.com/wireguard/wgctrl 925a1e7659e6 -> a9ab2273dd10
• google.golang.org/grpc v1.68.0 -> v1.69.4
• google.golang.org/protobuf v1.35.2 -> v1.36.2
• k8s.io/api v0.32.0-rc.1 -> v0.32.0
• k8s.io/apimachinery v0.32.0-rc.1 -> v0.32.0
• k8s.io/client-go v0.32.0-rc.1 -> v0.32.0
• sigs.k8s.io/controller-runtime v0.19.3 -> v0.19.4

Previous release can be found at v0.45.0

Welcome to the v0.45.0-beta.0 release of Omni!
This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Service Account Management UI

It is now possible to view, create, delete and edit service account in the Omni web UI.

New SBC Support

Turing RK1 SBC installation media can now be downloaded from Omni.

User Management CLI

omnictl now has new commands for user management to make it consistent with the UI:

• omnictl user list
• `omnictl user create [email] --role [role]
• omnictl user delete [email]
• omnictl user set-role email --role [role]

Contributors

• Utku Ozdemir
• Noel Georgi
• Andrey Smirnov
• Artem Chernyshev
• Dmitriy Matrenichev
• Christopher Gill
• Nico Berlee

Changes

<details><summary>23 commits</summary> <p>

• 99693cf test: assert power on/off status in static infra provider tests
• 471831c test: assert machine labels in static infra provider tests
• 8aeff65 feat: update Talos machinery to final 1.9.0-beta.1
• a7b603e feat: implement CLI commands for user management
• bbbf6f2 feat: add Turing RK1 SoM to SBCs dropdown
• d8e3aad chore: handle renamed drm extensions
• 6f3ce0d fix: regenerate wipe id of infra machines only once per de-allocation
• ce40338 feat: add rejected state to infra machine acceptance status
• 8a64ba7 chore: bump COSI runtime to v0.7.5
• 815b2b0 feat: allow specifying extra kernel args on infra machines
• 95c22be chore: bump deps
• e84b10a fix: fix panic in ConfigPatchRequestController
• ac362f9 fix: ignore Unimplemented errors in MetaDelete calls
• 377b550 feat: update Talos machinery to v1.9.0-beta.0
• 776bc65 test: add static infra provider (bare-metal provider) integration tests
• d879c6e chore: bump discovery service to v1.0.8
• 5a26d4c feat: add resources and controllers for bare metal infra provider
• 033e051 chore: bump Go to 1.23.3, rekres, regenerate sources, make linters happy
• 9085e82 fix: use the custom image factory host in backend and frontend
• 7fd2817 chore: deprecate Talos 1.4
• d46fe7e fix: fix compose.yaml typo
• e4586f4 fix: properly set up provider for autoprovision tests
• 05ab993 fix: properly map config patch requests in the infra provision ctrl </p> </details>

Changes from siderolabs/crypto

<details><summary>1 commit</summary> <p>

• 0d45dee chore: bump deps </p> </details>

Changes from siderolabs/discovery-service

<details><summary>1 commit</summary> <p>

• 2bb245a fix: do not register storage metric collectors if it is not enabled </p> </details>

Changes from siderolabs/go-kubernetes

<details><summary>4 commits</summary> <p>

• 06f07ab chore: add authorization config api version
• 5ca8ab1 chore: kube-apiserver authorization config file support
• 0f62a7e feat: add one more deprecation/removal for v1.32
• 87d2e8e feat: add one more deprecation for 1.32.0-beta.0 </p> </details>

Changes from siderolabs/image-factory

<details><summary>11 commits</summary> <p>

• d0dcfe5 release(v0.6.2): prepare release
• a8cdc21 feat: update dependencies for Talos 1.9
• b7f7fd3 chore: add hash errata for tarball headers
• 370c137 fix: vmware build assets on non-amd64
• c102c95 chore: alias i915/amdgpu extensions to new name
• b7b4c71 release(v0.6.1): prepare release
• 96c8455 chore: bump generated data
• cc1074b release(v0.6.0): prepare release
• 0ca8240 fix: secureboot iso gen
• 8e66370 feat: hide Talos metal agent extension on the UI
• d98b007 feat: reword wizard using GitHub Copilot </p> </details>

Dependency Changes

• github.com/ProtonMail/gopenpgp/v2 v2.7.5 -> v2.8.1
• github.com/aws/aws-sdk-go-v2 v1.32.3 -> v1.32.6
• github.com/aws/aws-sdk-go-v2/config v1.28.1 -> v1.28.6
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.35 -> v1.17.43
• github.com/aws/aws-sdk-go-v2/service/s3 v1.66.2 -> v1.71.0
• github.com/aws/smithy-go v1.22.0 -> v1.22.1
• github.com/containers/image/v5 v5.32.2 -> v5.33.0
• github.com/cosi-project/runtime v0.7.1 -> v0.7.5
• github.com/cosi-project/state-etcd v0.4.0 -> v0.4.1
• github.com/emicklei/dot v1.6.2 -> v1.6.4
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.23.0 -> v2.24.0
• github.com/johannesboyne/gofakes3 2db7ccb81e19 -> 0da3aa9c32ca
• github.com/siderolabs/crypto v0.5.0 -> v0.5.1
• github.com/siderolabs/discovery-service v1.0.7 -> v1.0.8
• github.com/siderolabs/go-kubernetes v0.2.14 -> v0.2.17
• github.com/siderolabs/image-factory v0.5.0 -> v0.6.2
• github.com/siderolabs/talos/pkg/machinery v1.8.2 -> v1.9.0-beta.1
• github.com/stretchr/testify v1.9.0 -> v1.10.0
• github.com/zitadel/oidc/v3 v3.32.1 -> v3.33.1
• go.etcd.io/etcd/client/pkg/v3 v3.5.16 -> v3.5.17
• go.etcd.io/etcd/client/v3 v3.5.16 -> v3.5.17
• go.etcd.io/etcd/server/v3 v3.5.16 -> v3.5.17
• golang.org/x/crypto v0.28.0 -> v0.29.0
• golang.org/x/net v0.30.0 -> v0.31.0
• golang.org/x/sync v0.8.0 -> v0.10.0
• golang.org/x/tools v0.26.0 -> v0.27.0
• google.golang.org/grpc v1.67.1 -> v1.68.0
• google.golang.org/protobuf v1.35.1 -> v1.35.2
• k8s.io/api v0.31.2 -> v0.32.0-rc.1
• k8s.io/apimachinery v0.31.2 -> v0.32.0-rc.1
• k8s.io/client-go v0.31.2 -> v0.32.0-rc.1
• sigs.k8s.io/controller-runtime v0.19.1 -> v0.19.3

Previous release can be found at v0.44.0

Welcome to the v0.44.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Automatically Resolve Cluster in talosctl

talosctl command now works without --cluster flag when using instance wide Talos config. Omni will automatically resolve the correct cluster.

Reset Removed Machines

Omni will now try to wipe Talos installation from the machines which are removed from the instance.

Contributors

• Artem Chernyshev
• Dmitriy Matrenichev
• Andrey Smirnov
• Noel Georgi
• Tijmen Blaauw - van den Brink

Changes

<details><summary>25 commits</summary> <p>

• fe0fc17 feat: support creating config patches in the infrastructure providers
• 3e8bc8d feat: enable watch retries on Omni side
• 23ccdb5 chore: bump dependencies
• be3e67c fix: include NodeJS types in the frontend build
• abaee03 fix: make web UI show favicon
• cc59192 feat: reset machine when it's removed from Omni
• 900987b test: disable secure boot in e2e tests
• 58159e4 feat: automatically resolve cluster in talosctl calls
• 8da2328 fix: remove MaintenanceConfigPatchController finalizers
• 21455d9 fix: properly show the current manifests in the bootstrap manifest sync
• c904e3a chore: do not audit log GET requests to k8s
• 62917e7 fix: use proper selectors in the MachineClass create UI
• 4b4088d fix: do not read Talos versions from the image registry ever
• b3dc48a chore: bump dependencies
• 9d0a512 fix: filter block devices with UNKNOWN type
• 8c737ba fix: fetch Talos version from the image factory
• 83554e5 fix: do not set empty initial labels in the UI
• 98315a9 fix: do not build acompat docker image
• cd1f2bd fix: build arm64 integration tests executable
• c754cdc feat: support insecure localhost infra provider access mode
• 284e8b5 fix: introduce timeout in the etcd healthchecks in the machine set ctrl
• d7b92e7 chore: remove ip_address field from audit log session
• 18b13ea chore: add basic helm chart
• 1544b9c chore: move from Codec to CodecV2
• 1c12dfc fix: properly return error from config.Init </p> </details>

Changes from siderolabs/crypto

<details><summary>1 commit</summary> <p>

• 58b2f92 chore: use HTTP/2 ALPN by default </p> </details>

Changes from siderolabs/discovery-api

<details><summary>1 commit</summary> <p>

• 005e92c chore: rekres and regen </p> </details>

Changes from siderolabs/discovery-client

<details><summary>1 commit</summary> <p>

• b74fb90 fix: allow custom TLS config for the client </p> </details>

Changes from siderolabs/discovery-service

<details><summary>4 commits</summary> <p>

• b8da986 fix: reduce memory allocations (logger)
• 3367c7b chore: add proto-codec/codec
• efbb10b fix: properly parse peer address
• cf39974 feat: support direct TLS serving </p> </details>

Changes from siderolabs/gen

<details><summary>3 commits</summary> <p>

• e847d2a chore: add more utilities to xiter
• f3c5a2b chore: add Empty and Empty2 iterators
• c53b90b chore: add packages xiter/xstrings/xbytes </p> </details>

Changes from siderolabs/go-circular

<details><summary>1 commit</summary> <p>

• 9a0f7b0 fix: multiple data race issues </p> </details>

Changes from siderolabs/go-kubernetes

<details><summary>3 commits</summary> <p>

• e56a7f6 fix: update deprecations based on Kubernetes 1.32.0-alpha.3
• 381f251 feat: update for Kubernetes 1.32
• 0e767c5 chore: k8s 1.31 kube-scheduler health endpoints </p> </details>

Changes from siderolabs/grpc-proxy

<details><summary>2 commits</summary> <p>

• de1c628 fix: copy data from big frame msg
• ef47ec7 chore: upgrade Codec implementations and usages to Codec2 </p> </details>

Changes from siderolabs/proto-codec

<details><summary>3 commits</summary> <p>

• 0d84c65 chore: add support for gogo protobuf generator
• 19f8d2e chore: add kres
• e038bb4 Initial commit </p> </details>

Changes from siderolabs/siderolink

<details><summary>2 commits</summary> <p>

• 1893385 fix: initialize tls listener properly
• 6c8fa1f feat: allow listening over TLS for SideroLink API </p> </details>

Dependency Changes

• github.com/adrg/xdg v0.5.0 -> v0.5.3
• github.com/aws/aws-sdk-go-v2 v1.30.4 -> v1.32.3
• github.com/aws/aws-sdk-go-v2/config v1.27.31 -> v1.28.1
• github.com/aws/aws-sdk-go-v2/credentials v1.17.30 -> v1.17.42
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.16 -> v1.17.35
• github.com/aws/aws-sdk-go-v2/service/s3 v1.61.0 -> v1.66.2
• github.com/aws/smithy-go v1.20.4 -> v1.22.0
• github.com/cosi-project/runtime v0.6.3 -> v0.7.1
• github.com/cosi-project/state-etcd v0.3.2 -> v0.4.0
• github.com/fsnotify/fsnotify v1.7.0 -> v1.8.0
• github.com/golang-jwt/jwt/v4 v4.5.0 -> v4.5.1
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 -> v2.23.0
• github.com/hashicorp/vault/api v1.14.0 -> v1.15.0
• github.com/hashicorp/vault/api/auth/kubernetes v0.7.0 -> v0.8.0
• github.com/johannesboyne/gofakes3 edd0227ffc37 -> 2db7ccb81e19
• github.com/jonboulle/clockwork fc59783b0293 -> 7e524bd2b238
• github.com/prometheus/client_golang v1.20.2 -> v1.20.5
• github.com/prometheus/common v0.57.0 -> v0.60.1
• github.com/siderolabs/crypto v0.4.4 -> v0.5.0
• github.com/siderolabs/discovery-api v0.1.4 -> v0.1.5
• github.com/siderolabs/discovery-client v0.1.9 -> v0.1.10
• github.com/siderolabs/discovery-service v1.0.3 -> v1.0.7
• github.com/siderolabs/gen v0.5.0 -> v0.7.0
• github.com/siderolabs/go-circular v0.2.0 -> v0.2.1
• github.com/siderolabs/go-kubernetes v0.2.11 -> v0.2.14
• github.com/siderolabs/grpc-proxy v0.4.1 -> v0.5.1
• github.com/siderolabs/omni/client v0.39.1 -> v0.42.1
• github.com/siderolabs/proto-codec v0.1.1 new
• github.com/siderolabs/siderolink v0.3.9 -> v0.3.11
• github.com/siderolabs/talos/pkg/machinery v1.8.0 -> v1.8.2
• github.com/zitadel/logging v0.6.0 -> v0.6.1
• github.com/zitadel/oidc/v3 v3.28.2 -> v3.32.1
• go.etcd.io/etcd/client/pkg/v3 v3.5.15 -> v3.5.16
• go.etcd.io/etcd/client/v3 v3.5.15 -> v3.5.16
• go.etcd.io/etcd/server/v3 v3.5.15 -> v3.5.16
• golang.org/x/crypto v0.26.0 -> v0.28.0
• golang.org/x/net v0.28.0 -> v0.30.0
• golang.org/x/tools v0.24.0 -> v0.26.0
• google.golang.org/grpc v1.66.0 -> v1.67.1
• google.golang.org/protobuf v1.34.2 -> v1.35.1
• k8s.io/api v0.31.0 -> v0.31.2
• k8s.io/client-go v0.31.0 -> v0.31.2
• sigs.k8s.io/controller-runtime v0.19.0 -> v0.19.1

Previous release can be found at v0.43.0

Welcome to the v0.43.0 release of Omni!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

gRPC Tunnel

gRPC tunnel for wireguard can now be enabled when downloading the installation media from Omni.

Talos Diagnostics

Omni now shows Talos diagnostics information for Talos >= 1.8.0.

Contributors

• Artem Chernyshev
• Utku Ozdemir
• Dmitriy Matrenichev
• Andrey Smirnov
• Birger J. Nordølum
• Justin Garrison

Changes

<details><summary>27 commits</summary> <p>

• 397f204 feat: display pending machine requests in the machine sets
• 0d66194 release(v0.43.0-beta.0): prepare release
• 4084b6e fix: get proper IP from peer metadata
• d547889 fix: filter requests in the infra provision controller
• d1c9d9d chore: set peer.address to inform about IP status
• 23a4092 chore: refactor code
• 5630d83 fix: ignore parse errors in the log parser
• 8334c59 chore: add a way to get provider data in the infra provider
• cc71fb6 feat: support auto provisioned machine classes
• 41c3bd5 fix: support whitespaces in the label selectors
• 99191c6 feat: integrate with Talos diagnostics
• dcf89d9 feat: update Omni for Talos 1.8 machinery
• a04b07f test: fix the error message in infra test
• 3e3e53b chore: fix capitalization of wireguard
• f69ff37 feat: make infra provider report back it's information: schema, name
• 7555312 fix: get rid of the exceptions in the ui
• 8e48723 feat: support attaching machine sets to a machine request sets
• bb2f52d chore: drop machine class status and machine set pressure resources
• 3ef1f85 fix: call deprovision only after the machine request status is deleted
• 423f729 chore: bump default versions: Talos 1.7.6, Kubernetes 1.30.5
• c4a4151 feat: allow specifying grpc tunnel option explicitly for install media
• bb14ed6 fix: parse machine labels and extensions as slices in omnictl download
• 9e033d7 docs: update omni template so docs are easier
• 4c329db fix: update COSI runtime
• 81e08eb test: run infra integration tests against Talemu provider
• f83cf3b fix: pin apexcharts version to 3.45.2
• e3d46f9 feat: implement compression of config fields on resources </p> </details>

Changes since v0.43.0-beta.0

<details><summary>1 commit</summary> <p>

• 397f204 feat: display pending machine requests in the machine sets </p> </details>

Dependency Changes

• github.com/cosi-project/runtime v0.6.1 -> v0.6.3
• github.com/cosi-project/state-etcd v0.3.1 -> v0.3.2
• github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 new
• github.com/siderolabs/talos/pkg/machinery 6f7c3a8e5c63 -> v1.8.0

Previous release can be found at v0.42.0

Welcome to the v0.43.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

gRPC Tunnel

gRPC tunnel for wireguard can now be enabled when downloading the installation media from Omni.

Talos Diagnostics

Omni now shows Talos diagnostics information for Talos >= 1.8.0.

Contributors

• Artem Chernyshev
• Utku Ozdemir
• Dmitriy Matrenichev
• Andrey Smirnov
• Birger J. Nordølum
• Justin Garrison

Changes

<details><summary>25 commits</summary> <p>

• 4084b6e fix: get proper IP from peer metadata
• d547889 fix: filter requests in the infra provision controller
• d1c9d9d chore: set peer.address to inform about IP status
• 23a4092 chore: refactor code
• 5630d83 fix: ignore parse errors in the log parser
• 8334c59 chore: add a way to get provider data in the infra provider
• cc71fb6 feat: support auto provisioned machine classes
• 41c3bd5 fix: support whitespaces in the label selectors
• 99191c6 feat: integrate with Talos diagnostics
• dcf89d9 feat: update Omni for Talos 1.8 machinery
• a04b07f test: fix the error message in infra test
• 3e3e53b chore: fix capitalization of wireguard
• f69ff37 feat: make infra provider report back it's information: schema, name
• 7555312 fix: get rid of the exceptions in the ui
• 8e48723 feat: support attaching machine sets to a machine request sets
• bb2f52d chore: drop machine class status and machine set pressure resources
• 3ef1f85 fix: call deprovision only after the machine request status is deleted
• 423f729 chore: bump default versions: Talos 1.7.6, Kubernetes 1.30.5
• c4a4151 feat: allow specifying grpc tunnel option explicitly for install media
• bb14ed6 fix: parse machine labels and extensions as slices in omnictl download
• 9e033d7 docs: update omni template so docs are easier
• 4c329db fix: update COSI runtime
• 81e08eb test: run infra integration tests against Talemu provider
• f83cf3b fix: pin apexcharts version to 3.45.2
• e3d46f9 feat: implement compression of config fields on resources </p> </details>

Dependency Changes

• github.com/cosi-project/runtime v0.6.1 -> v0.6.3
• github.com/cosi-project/state-etcd v0.3.1 -> v0.3.2
• github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 new
• github.com/siderolabs/talos/pkg/machinery 6f7c3a8e5c63 -> v1.8.0

Previous release can be found at v0.42.0

Welcome to the v0.42.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Allow multiple IP's in siderolink-wireguard-advertised-addr flag

The siderolink-wireguard-advertised-addr flag now accepts multiple IP addresses separated by commas. This is useful when you have multiple IPs (IPv4 and IPv6) on the host machine and want to allow Talos nodes to connect to the Omni using any of them.

Audit log

It is now possible to get the audit log from the Omni. By default it's disabled. To enable, pass --audit-log-dir <dir> to the Omni. The audit log will be written to the specified directory, separated by day.

Retention is set to 30 days (including the current day). The audit log is written in JSON format, where each entry is a JSON object.

There are two ways to get audit log, and for both you need Admin role:

1. By using the UI: Simply click "Download audit log" in the main menu.
2. Using omnictl audit-log command. This command will stream the audit log from the Omni to the local machine stdout.

Cluster Sort

Cluster list on Clusters page can now be sorted by name or creation date. Before it was always sorted by creation date (newest first).

TLS Cert Reload

Omni service can now reload the TLS certs without restart.

Contributors

• Dmitriy Matrenichev
• Artem Chernyshev
• Andrey Smirnov
• Utku Ozdemir
• Noel Georgi
• Justin Garrison

Changes

<details><summary>27 commits</summary> <p>

• c076c3c fix: filter readonly, CD and loop devices for 1.8
• 0360422 feat: support passing extra data through the siderolink join token
• 381021e fix: calculate requested and connected machines in the ClusterStatus
• 7abb0f5 chore: bump deps
• 464f699 chore: rename CloudProvider to InfraProvider
• bfe036e chore: allow to specify start and end time for audit-log
• e2f5795 chore: allow multiple IP's for siderolink-wireguard-advertised-addr flag
• 3c1defe fix: fix spelling for hover text
• 76ba670 chore: allow users with admin role to download audit log from UI
• e8d578a fix: add siderolink connection params to the infra provider interface
• 4a82cd0 chore: rewrite renamed extension names on Talos version updates
• 56c0394 fix: always remove finalizers from the ClusterMachineStatus
• ce45042 feat: implement MachineRequestSets and support links cleanup flow
• 85aaf1c feat: support sorting cluster by name, creation time
• 95c8210 feat: implement base infra provider library
• a32a6fa feat: reload TLS certs without restart
• 00ae084 fix: delete upgrade meta key from nodes after upgrades
• 3f5c0f8 chore: enable 'github.com/planetscale/vtprotobuf' encoding
• 34a8c36 chore: rekres to get BUSL license change date updated on releases
• bf188e4 chore: implement audit log reader
• 5d48547 chore: use range-over-func iterators for resource iteration
• dc349c1 chore: do a full generate with latest deps
• 67f2e8d chore: print error on closing secondary storage backing store
• 89e8a62 fix: pass the logger to machine logs circular buffer
• d2387d9 fix: use a separate phase for the extensions installation
• cbfe7c9 chore: add periodic cleanup of old log files
• aea900f fix: display machines in tearing down state </p> </details>

Changes from siderolabs/discovery-service

<details><summary>1 commit</summary> <p>

• 270f257 chore: bump deps </p> </details>

Changes from siderolabs/go-api-signature

<details><summary>2 commits</summary> <p>

• 8807c5e fix: account for time truncation to a second resolution
• 1b35ea8 chore: bump deps and fix data race </p> </details>

Changes from siderolabs/go-debug

<details><summary>1 commit</summary> <p>

• c8f9b12 chore: add support for Go 1.23 </p> </details>

Changes from siderolabs/go-talos-support

<details><summary>3 commits</summary> <p>

• 58f4f0f chore: bump Go dependencies
• f9d46fd fix: add dns-resolve-cache to the list of logs gathered
• 69891cf chore: remove containerd dependency </p> </details>

Changes from siderolabs/image-factory

<details><summary>9 commits</summary> <p>

• fe9134a release(v0.5.0): prepare release
• 7f09750 feat: update to Talos 1.8
• b985abc fix: cache generated system extension image correctly
• 9687413 fix: set SOURCE_DATA_EPOCH
• fef0833 chore: add in new helios64 overlay
• 03bd46f feat: support inclusion on well-known UEFI SecureBoot certs
• 608a6f0 chore: alias nvidia extensions to lts versions
• 8b4e0d9 chore: make metatadata pkg public
• 7a4de58 chore: build multi-arch image </p> </details>

Dependency Changes

• github.com/auth0/go-jwt-middleware/v2 v2.2.1 -> v2.2.2
• github.com/aws/aws-sdk-go-v2 v1.30.3 -> v1.30.4
• github.com/aws/aws-sdk-go-v2/config v1.27.27 -> v1.27.31
• github.com/aws/aws-sdk-go-v2/credentials v1.17.27 -> v1.17.30
• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.10 -> v1.17.16
• github.com/aws/aws-sdk-go-v2/service/s3 v1.58.3 -> v1.61.0
• github.com/aws/smithy-go v1.20.3 -> v1.20.4
• github.com/containers/image/v5 v5.32.1 -> v5.32.2
• github.com/cosi-project/runtime v0.5.5 -> v0.6.1
• github.com/cosi-project/state-etcd v0.3.0 -> v0.3.1
• github.com/fsnotify/fsnotify v1.7.0 new
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.21.0 -> v2.22.0
• github.com/prometheus/client_golang v1.19.1 -> v1.20.2
• github.com/prometheus/common v0.55.0 -> v0.57.0
• github.com/siderolabs/discovery-service 74bca2da5cc8 -> v1.0.3
• github.com/siderolabs/go-api-signature v0.3.4 -> v0.3.6
• github.com/siderolabs/go-debug v0.3.0 -> v0.4.0
• github.com/siderolabs/go-talos-support v0.1.0 -> v0.1.1
• github.com/siderolabs/image-factory v0.4.2 -> v0.5.0
• github.com/siderolabs/talos/pkg/machinery v1.8.0-alpha.1 -> 6f7c3a8e5c63
• github.com/zitadel/oidc/v3 v3.27.0 -> v3.28.2
• go.etcd.io/bbolt v1.3.10 -> v1.3.11
• google.golang.org/grpc v1.65.0 -> v1.66.0
• sigs.k8s.io/controller-runtime v0.18.5 -> v0.19.0

Previous release can be found at v0.41.0

Welcome to the v0.41.0-beta.0 release of Omni! This is a pre-release of Omni

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni/issues.

Contributors

• Artem Chernyshev
• Andrey Smirnov
• Dmitriy Matrenichev
• Utku Ozdemir
• Brant Gurganus

Changes

<details><summary>15 commits</summary> <p>

• 1cb1080 feat: bump kube-service-exposer to v0.2.0
• dd510e9 fix: properly cleanup tearing down exposed services
• 0bec3e4 chore: bump deps
• 6080c25 test: fix several flaky tests
• 99f9317 chore: implement audit log for several types
• ee73083 fix: properly remove MachineSetNode finalizer in the controller
• 16b008b fix: increase LRU cache size for Talos and Kubernetes clients
• 36c7b10 fix: skip reconciling redacted machine config on no input changes
• f0b44b1 fix: add gRPC read buffer pool for etcd client
• b1fceea fix: properly handle ExposedService resource finalizers
• 5e35cbe fix: fix nil pointer dereference in workload proxy reconciler
• 4746652 docs: add a stringArray example for extensions
• 7536191 chore: implement labels extractor controller for more efficient code
• 7df58fe chore: add request label to the links created by the cloud provider
• d194d59 feat: implement audit log </p> </details>

Dependency Changes

• github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.8 -> v1.17.10
• github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 -> v1.58.3
• github.com/containers/image/v5 v5.31.1 -> v5.32.1
• github.com/go-jose/go-jose/v4 v4.0.3 -> v4.0.4
• github.com/google/go-containerregistry v0.20.1 -> v0.20.2
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 -> v2.21.0
• github.com/johannesboyne/gofakes3 99de01ee122d -> edd0227ffc37
• github.com/prometheus/common v0.55.0 new
• github.com/zitadel/oidc/v3 v3.26.0 -> v3.27.0
• go.etcd.io/etcd/client/pkg/v3 v3.5.14 -> v3.5.15
• go.etcd.io/etcd/client/v3 v3.5.14 -> v3.5.15
• go.etcd.io/etcd/server/v3 v3.5.14 -> v3.5.15
• golang.org/x/crypto v0.25.0 -> v0.26.0
• golang.org/x/net v0.27.0 -> v0.28.0
• golang.org/x/sync v0.7.0 -> v0.8.0
• golang.org/x/tools v0.22.0 -> v0.24.0
• k8s.io/api v0.30.3 -> v0.31.0
• k8s.io/apimachinery v0.30.3 -> v0.31.0
• k8s.io/client-go v0.30.3 -> v0.31.0
• sigs.k8s.io/controller-runtime v0.18.4 -> v0.18.5

Previous release can be found at v0.40.0